Is there a way to find out who set a group policy change in a large enterprise? Is there some way to set and audit trail?
You’re right to have discovered that the internal auditing for Group Policy is, well, rather lacking. There are a variety of Group Policy auditing products.
The GPanswers.com forum is closed now (thanks, spammers!)
But we encourage you to join us at LinkedIn in the “GPO Stuff” group.
Jeremy is regular there, and there is a reasonable system to prevent junk posts.
In all, we think it’s the right place to go for Group Policy-specific questions.
It’s a private group, but just JOIN it, and the owner should approve your request.
See you there !
-Jeremy Moskowitz, Group Policy MVP