Audit and recovery of group policy components
Cayosoft Guardian supports change monitoring and rollback of group policy objects, their extensions, and related objects listed in this article.
NOTE: As there are thousands of GPO settings that might be present in environments, Cayosoft Guardiann might not cover all possible extensions and settings.
This article contains a list of objects and GPO extensions that are supported. If you would like to monitor and recover changes to some extensions that are not listed here, contact Cayosoft support to submit an enhancement request. However, even if an extension is not supported, you will still be able to see the GPO version change in the Change History.
List of supported objects and extensions
Object or extension name |
Location |
Change Monitoring |
Rollback |
|---|---|---|---|
Security Settings |
SysVol\microsoft\windows nt\secedit\gpttmpl.inf |
YES |
YES |
Advanced Audit Configuration |
SysVol\Microsoft\Windows NT\Audit\audit.csv |
YES |
YES |
Registry Settings |
SysVol\Registry.pol, sysVol\adm\*.adm |
YES |
YES |
Software Restriction |
SysVol\Registry.pol |
NO |
NO |
Public Key |
SysVol\Registry.pol |
YES |
YES |
Network Access Protection Client Management (2012R2) |
SysVol\Registry.pol |
YES |
NO |
Windows Firewall |
SysVol\Registry.pol |
YES |
YES |
Policy-based QoS |
SysVol\Registry.pol |
YES |
NO |
Name Resolution Policy |
SysVol\Registry.pol |
YES |
NO |
Application Control Policies |
SysVol\Registry.pol |
YES |
NO |
Scripts (StartUp/Shutdown), (Logon/Logoff) |
Sysvol\scripts\scripts.ini, Sysvol\scripts\PSScripts.ini |
YES |
YES |
Central Access Policy |
SysVol\Microsoft\Windows NT\CAP\cap.inf |
YES |
NO |
Power Options |
SysVol\Preferences\PowerOptions\PowerOptions.xml |
YES |
YES |
Environment Variables |
Sysvol\Preferences\EnvironmentVariables\ EnvironmentVariables.xml |
YES |
YES |
Folders |
Sysvol\Preferences\Folders\Folders.xml |
YES |
YES |
Drive Maps |
SysVol\Preferences\Drives\drives.xml |
YES |
YES |
Files |
SysVol\Preferences\Files\files.xml |
YES |
YES |
Shortcuts |
SysVol\Preferences\Shortcuts\Shortcuts.xml |
YES |
YES |
Ini Files |
SysVol\Preferences\IniFiles\IniFiles.xml |
YES |
YES |
Data Sources |
SysVol\Preferences\DataSources\DataSources.xml |
YES |
YES |
Devices |
SysVol\Preferences\Devices\Devices.xml |
YES |
YES |
Services |
SysVol\Preferences\Services\Services.xml |
YES |
YES |
Network Shares |
SysVol\Preferences\NetworkShares\NetworkShares.xml |
YES |
YES |
Scheduled Tasks |
SysVol\Preferences\ScheduledTasks\ScheduledTasks.xml |
YES |
YES |
Printers |
SysVol\Preferences\Printers\Printers.xml |
YES |
YES |
Folder Options |
SysVol\Preferences\FolderOptions\FolderOptions.xml |
YES |
YES |
Network Options |
SysVol\Preferences\NetworkOptions\NetworkOptions.xml |
YES |
YES |
Local Users and Groups |
SysVol\Preferences\Groups\Groups.xml |
YES |
YES |
Regional Options |
SysVol\Preferences\RegionalOptions\RegionalOptions.xml |
YES |
YES |
Start Menu |
SysVol\Preferences\StartMenuTaskbar\ StartMenuTaskbar.xml |
YES |
YES |
Windows Registry |
SysVol\Preferences\Registry\Registry.xml |
YES |
YES |
Internet Options |
SysVol\Preferences\InternetSettings\ InternetSettings.xml |
YES |
YES |
WLanSvc Networks |
Active Directory: CN=IEEE80211, CN=Windows, CN=Microsoft |
YES |
YES |
LanSvc Networks |
Active Directory: CN=IEEE8023, CN=Windows, CN=Microsoft |
YES |
YES |
Folder Redirection |
Sysvol\USER\Documents & Settings\fdeploy1.ini |
NO |
NO |
Software Installation |
Active Directory: CN=Packages,CN=Class Store |
YES |
YES |
Deployed Printer Connections Policy |
Active Directory: LDAP://CN=PushedPrinterConnections, |
YES |
YES |
IP Security Policies |
Active Directory: CN=ipsec,CN=Windows,CN=Microsoft |
YES |
YES |
Remote Installation (removed since 2008R2) |
SysVol\Microsoft\RemoteInstall\oscfilter.ini |
NO |
NO |
Internet Explorer Maintenance |
SysVol\Microsoft\ieak\install.ins, SysVol\Microsoft\ieak\branding\zones\seczrsop.inf, SysVol\Microsoft\ieak\branding\zones\seczones.inf, SysVol\Microsoft\ieak\branding\authcode\authcode.inf |
NO |
NO |
Comments
0 comments
Please sign in to leave a comment.