Return
-
Title
Using the "Enterprise" scope in GPO protection templates does not properly protect newly created GPO objects -
Description
Protecting all GPO's in the Enterprise using the "Enterprise" selection works as expected for a GPO that exists when you create the policy. However, when you create a new GPO the message received when trying to change the GPO changes from "Access is Denied" to "Windows cannot update the policies". The actual changes are saved when updating the GPO and Change Auditor reports this action as "Protected" and that you were denied access. -
Resolution
Product defect Logged: 370386 - Using the "Enterprise" scope in GPO protection templates does not properly protect newly created GPO objects. This will be addressed in a future release of Change Auditor
-
Defect ID
370386