| KB ID: | 10042 |
| Last Revision: | November 26, 2006 |
| Version: | 1.0 |
Search: Find events when a specific group policy got applied to an OU.
Windows only logs that a group policy object was applied to an OU, but does not log which group policy objects got applied. LogClarity® logs this extended information which is critical information to have when these events happen.
PREREQUISITES
The name of the OU or the name of the GPO.
ESTIMATED QUERY TIME
<1 second.
METHOD 1 (Quick Search)
1. Enter the name of the OU in
the Quick Search field and click Go.
2. Filter out unrelated events with Smart Filter.
- or -
1. Enter the name of the GPO in the Quick Search field and click
Go.
2. Filter out unrelated events with Smart Filter.
METHOD 1 (Advanced Search)
1. Enter the name of the GPO in
the Parameter Name field.
- or -
1. Enter the name of the OU in the Target Name field and click
Search.
When a GPO is assigned to an OU, the attribute modified is the "gPLink". You can search for all events when the gPLink is modified in Advanced Search.
LIKELY SCENARIOS IT APPLIES TO
- You want to find out if a group policy object got applied or unapplied to an OU, and if so find out what GPO got applied.
FINE TUNE YOUR SEARCH
If you know the time scope, domain of the edited objects, or want to restrict your searches to users in a specific domain you can fine tune your search.