Zurück
-
Titel
When GPOs are deployed GPOADmin - 'Unauthorized Modification' is reported -
Beschreibung
When GPOs are deployed using GPOADmin, shortly after the deployment an 'Unauthorized Modification' is reported -
Ursache
This is likely related to a slow GPO deployment (could be the result of a heavily used DC, replication issues, etc) and as such the timing of the watcher service combined with the slow or busy DC resulted in this issue. A less aggressive watcher service in this case is an advantage as it is less likely to incorrectly mark GPOs as non-compliant. -
Lösung
Increase the polling interval of the Watcher Service to 120 seconds.
- Open Regedit on the GPOAdmin Server where the Watcher Service is running
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Quest\GPOADmin\WatcherConfig
- Create a new DWORD value named Interval
- Set the value to 120000 as Decimal
If you still get the Unauthorized Modification notice when you deploy GPOs try increasing the interval again by doubling it. You can increase this up to 1800000 which is 30 minutes.
If increasing the interval does not resolve the issue, please try restarting the Watcher Service.
Also confirm there is only one Watcher Service running in the environment.
-
Weitere Informationen
This can also occur for deploying deleted GPOs