Return
-
Title
There are events in the GPOADmin event log referencing a change was made to an object and the following event states the object was brought back into compliance however in the history of the GPO no events are logged -
Description
The below events are occurring in the GPOADmin event log as event ID 1050 (they will occur very close together):
"A change has been made in the live environment to the Scope of Management '<object DN>'"
and
"The scope of management '<object DN' as been brought back into compliance"
-
Cause
When an objects uSNChanged attribute value increments the watcher service will check the object and compare it to its latest backup to see if relevant changes have been made (security, links, etc) to see if the object is out of compliant and if it is, the objects status will change in the console and in its history. If nothing relevant has changed then no changes to the object will occur within GPOADmin client or the live environment. -
Resolution
If no compliance events exist in the history of the GPO then the informational events can be considered normal operation of the watcher service and can be ignored.