Showing posts with label GPO. Show all posts
Showing posts with label GPO. Show all posts

Tuesday, June 9, 2015

Monitoring GPO changes using SCOM

It is pretty common for AD admins to want to be able to monitor changes to GPO via SCOM.
Of course, there are events that are logged for every change made to any GPO.
The real challenge is that we will not be able to know which GPO was changed without having to go through an extensive search through the GPMC or by means of powershell.
What is required is that the SCOM alert should include the name of the GPO so that the efforts and time of the IT Admins are keep to the minimum.

The below is an article from the community that will enable you to do just that
Click here

Friday, June 14, 2013

Domain Admins Unable to run GPresult

I was faced with a situation that I was unable to run GPresult even with domain admins credentials.
Worked through the procedure below to resolve the issue.

1) Register the userenv.dll file
regsvr32 /n /I c:\windows\system32\userenv.dll

2)  Change Directory to the wbem folder
cd c:\windows\system32\wbem
- Recompile the scersop.mof
 mofcomp scersop.mof
- Optional Repositories you can recompile
mofcomp rsop.mof
mofcomp rsop.mfl  

3) Force Group Policy Update
gpupdate /force