Group Policy
Windows 2008

When you want to make group-policy changes it's best to make them on the PDC emulator for performance issues

Auditing active directory:
When you want to know who is doing what in your active directory you must perform 2 things:

  1. Define auditing policy in either the default domain policy or the default domain controllers policy
  2. Turn on auditing on the objects you want to track

Then it is under Computer Settings / Policies / Windows Settings / Security Settings / Local policies / Audit Policy
Then if you want to track the most choose Audit Directory Service access

Windows 2008

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License