monitor domain policy password changes

Archived from groups: microsoft.public.win2000.security (More info?)

I read that it couldn't be done. However, I would think you could turn on
aduit object access, then set auditing on the gpo that keeps getting
changed. It seems like it would work but I have never tried it. Interested
on hearing others thoughts.



<jcharth@hotmail.com> wrote in message
news:1123191219.062900.113640@g47g2000cwa.googlegroups.com...
> Hello I have 5 admins in my company i believe one is changing the
> password length to 0 everyday. How can i find out who is doing this? Is
> there a way to know who is the last one to modify the domain policy?
> thanks
>