Modifying the security of a Group Policy Object (GPO) via Group Policy Administrator is not being de (NETIQKB42700)

  • 7742700
  • 02-Feb-2007
  • 15-Mar-2013


NetIQ Group Policy Guardian 1.6


Modifying the security of a Group Policy Object (GPO) via Group Policy Administrator is not being detected by Group Policy Guardian.


Group Policy Guardian Version 1.6 Hotfix 42700

Installing Hotfix 42700 addresses the following issue:

  •  Correctly generating events when changing security for a GPO through NetIQ Group Policy Administrator (GPA).  If you make a change to the security of a GPO through GPA, and NetIQ Group Policy Guardian (GPG) does not generate an event, install this hotfix.

Important Note! Install Hotfix 42700 after you install hotfix 42439. If you install Hotfix 42439 after installing Hotfix 42700, reinstall Hotfix 42700.

To install this hotfix, run the GPG16_42700.exe file on computers with a GPG Server.

This hotfix creates or replaces the following files on your GPG Server:

  • \bin\eventaudit.exe
  • \bin\sd_xml.dll
  • \bin\faauddb.dll


The issue is due to the method that NetIQ Group Policy Guardian  (GPA) uses to modify the Security ACE's of GPO's.

Additional Information

Formerly known as NETIQKB42700