Share via

Find User That Changed GPO Scope / Delegation?

Nicholas Talbot 1 Reputation point
2020-10-28T15:40:33.947+00:00

Is there an Event ID that shows when / who changed the scope / delegation of a GPO?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,275 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,404 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Leon Laude 85,776 Reputation points
    2020-10-28T15:45:59.44+00:00

    Hi @Nicholas Talbot ,

    To identify which user has done any changes, you will have to enable auditing for Group Policy changes to be able.
    How to Audit Group Policy Changes using the Security Event Log

    ----------

    (If the reply was helpful please don't forget to upvote or accept as answer, thank you)

    Best regards,
    Leon

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.