Group Policy
Windows 2008
When you want to make group-policy changes it's best to make them on the PDC emulator for performance issues
Auditing active directory:
When you want to know who is doing what in your active directory you must perform 2 things:
- Define auditing policy in either the default domain policy or the default domain controllers policy
- Turn on auditing on the objects you want to track
Then it is under Computer Settings / Policies / Windows Settings / Security Settings / Local policies / Audit Policy
Then if you want to track the most choose Audit Directory Service access
page revision: 4, last edited: 05 Nov 2009 11:01