Monitor GPO Health
Troubleshooting problems with Group Policy is a necessary art. Problems will occur, and you will need to resolve them. However, you may be able to head off Group Policy issues by monitoring GPO health. If you find problems before they are reported via user complaints, or before the lack of security enforcement results in a successful attack, all the better. To monitor GPO health, you should monitor each of these:
DNS
Network connectivity
DC health
Replication
GPO-specific issues
The first four items are discussed in earlier sections. You can monitor many GPO-specific issues by using the GPMonitor.exe tool and by using the reporting features of GPMC. GPMonitor.exe is a resource kit tool that creates reports when policy settings ...
Get Windows Server 2003 Security: A Technical Reference now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
