Group Policy Guardian

Visit the Group Policy Guardian Website

Group Policy Change Monitoring

When an inadvertent, untested, or even malicious change is made to one or more of your Group Policy Objects (GPOs) the results can be disastrous, including service disruptions, replication challenges, security vulnerabilities, software licensing violations and more! Being alerted to when changes to your policy settings take place, along with knowing what was changed and who made it, are critical steps to be able to successfully and quickly troubleshoot and remediate any issues.

NetIQ Group Policy Guardian minimizes the risks associated with Group Policy Object (GPO) change management and helps determine and document all Group Policy changes to the live environment, both authorized and unauthorized. With real-time GPO change detection and alerting, Group Policy Guardian captures all GPO changes within an auditing database where detailed reports identify changes, pre- and post-change values, who implemented the change, and when.

Key Features & Benefits

• Notifies when specified Group Policy change events occur and whether changes were authorized - Delivers instant change notifications through email or pager, enabling you to see and react to GPO changes immediately. When used in conjunction with NetIQ Group Policy Administrator™, the control system can classify the changes as authorized or unauthorized.

• Provides detailed Group Policy change history - Delivers precise and complete documentation of GPO changes with convenient, in-depth tracking features.

• Delivers powerful, comprehensive reports - Enables you to run detailed reports linked to each change alert. Based on user-defined criteria, the auditing database presents your selected change events, including pre- and post-change values.

• Integrates with existing monitoring infrastructure - Integrates most third-party systems management software including NetIQ AppManager, NetIQ Security Manager™ and Microsoft Operations Manager (MOM) to simplify configuration and deployment for fast and cost-effective implementation.

Key Technical Features

• Real-time rules-based monitoring of Group Policy changes, monitoring changes to policy settings, to security filters and GPO links, and with more than 100 pre-defined alert rules for each GPO.

• Flexible alerting options, including notifications delivered through email or pager, or through a monitoring system's console, (e.g., NetIQ AppManager).

• Powerful audit database that retains a complete and detailed historical record of Group Policy changes, allowing detailed reporting of who made changes, what was changed (including pre- and post-change values), and when the change was implemented.

• Comprehensive reporting, including detailed reports linked to each alert. Reports also translate Globally Unique Identifier (GUID) and similar hard-to-understand identifiers into human-readable strings for immediate comprehension of what was impacted and by whom.

Visit the Group Policy Guardian Website