Real-time alerts for changes to GPO

Good morning!

In Quest Active Administrator, how can I configure real-time alerts for changes to Group Policy Objects (GPOs), and can those alerts include the username of the person who made the change?

Also, in the event of an unwanted change, what is the best way to use Active Administrator's backup and restore feature to roll back a specific GPO to a previous state without affecting other settings?

Thanks very much

Regards,

Ruoldfe Friede
CTO Schweiz Blumen

  • You can schedule gpo backups so that you can restore them to a previous state. For alerts, create an alert and search for Events for "GPO" and "Group Policy" and pick the event you want to know about. Most are pulled from windows logs so they are only as good as MS has created.