Server 2012 R2 How to track changes made in group policy?


  • Everything I find on this subject always links back to server 2003 or 2008. I can't find anything on server 2012 R2

    I have the following set in my Audit Policy in default domain controller GPO

    Audit account logon events - Success

    Audit account management - Failure

    Audit directory service access - Success

    Audit Logon Events - Success,Failure

    Audit Object Access - Success

    Audit Policy Change - Success,Failure

    Audit Privilege Use - Success

    Audit Process Tracking - Success

    Audit System Event - Success

    I go and make a few GPO changes, When I search the event log under Windows Logs - Security and search for Event ID's - 5137,5136,5138,5130

    I get nothing

    How can I track GPO changes in Server 2012 R2 without buying some third party tool?

    Wednesday, March 2, 2016 8:36 PM


All replies