Monitor GPO Changes, Builtin to get GPO Displayname

EvotecIT / PSWinReporting

This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.

MIT License

700 stars 67 forks source link

Monitor GPO Changes, Builtin to get GPO Displayname #83

Open DonDom86 opened 1 month ago

DonDom86 commented 1 month ago

Examples/RunMe-FindEventsGroupPolicyChangesWithConfig.ps1

Hi saw you example. Is there an builtin way to convert IDs to the DisplayName of a GPO?

Thanks

PrzemyslawKlys commented 1 month ago

No, Events don't store it from what I remember. But I will most likely add functionality that queries it live in PSEventViewer

DonDom86 commented 1 month ago

No the event do not store them directly. But the unique id is in the events.