Hi,

im running version 4.1.0 build 4121 and am having issues getting GPO auditing to work properly. I get info in the Recently Modified GPO report but Im not able to get info in the Deleted report (even though the action I did was to delete a GPO). Im running Windows 2003 SP2 on the DC. Ive double & triple checked the auditing within AD and it all seems fine.

 

In addition to this, is there anyway i can drill down into the event detail when viewing Reports or is it only possible in Alerts. I want the ability to go back and look in detail at something that was raised in the Report.

 

Thanks for your help...

 

mike