Security Basics mailing list archives

Re: AD Policy audit tool for Windows 2000


From: Koolk3 <koolk3 () gmail com>
Date: Thu, 25 May 2006 09:10:01 -0400

Thanks everyone for your responses. Here is an update on what I have
found so far. I would also like to have your feedback on any of the
tools listed here if you have any experience with them.

1) GPOVault (free) from DesktopStandard: This can compare settings
between 2 GPO rsops. Anyone has any experience using this? This has to
be used in conjuction with GPMC.

2) GPMC from Microsoft: This tool may have the functionationality I am
looking for interms of finding the changed GPOs but I am not so sure.

3) GPInventory from Microsoft: I am not sure about this either.

4) Secedit from Microsoft: Does this run on Windows 2000?

If you have any experience with these tools can you please provide me
some feedback? I need to know which one will be the best choice to
figure out the GPO settings changed after a default installation.

Thanks.

Koolk3

On 5/24/06, Koolk3 <koolk3 () gmail com> wrote:
Hello list,

Basically, I am trying to find the policies that has been changed by
active directory after a default Windows 2000 installation. The
policies were modifed without any documenattion and now it is a
problem.

I am looking for a tool that can help me audit Active Directory
policies that has been applied to Windows 2000 workstations. Ideally
the tool should know the default policy (from original win 2000
install) and then give me a report on what has changed.

Most tools that does this are for Windows XP and I need something for
Windows 2000.

Any suggestions?

Sincerely,
--
KoolK3



--
KoolK3


Current thread: