Real-time alerts for changes to GPO

Good morning!

In Quest Active Administrator, how can I configure real-time alerts for changes to Group Policy Objects (GPOs), and can those alerts include the username of the person who made the change?

Also, in the event of an unwanted change, what is the best way to use Active Administrator's backup and restore feature to roll back a specific GPO to a previous state without affecting other settings?

Thanks very much

Regards,

Ruoldfe Friede
CTO Schweiz Blumen

  • You can schedule gpo backups so that you can restore them to a previous state. For alerts, create an alert and search for Events for "GPO" and "Group Policy" and pick the event you want to know about. Most are pulled from windows logs so they are only as good as MS has created.

  • I’ve set up real-time GPO change alerts using Quest Active Administrator, and it’s been a game changer for compliance tracking. Once configured, you get instant notifications for edits, deletions, or new policies—way faster than relying on manual audits or event logs. Just make sure your permissions and audit settings are properly tuned, or you might miss critical changes in high-privilege environments.