Services

[revingtosh]

Hi,

 

I've got a bit of a funny here which i'm hoping some kind soul can assist with.

 

We run a hardened Workstation configuration which I have recently inherited and our Workstation Baseline GPO clearly disables a number of Windows services. In addition to this, there are other random services disabled too for whatever reason. I don't know.

 

My problem is this... I have a GPO which deploys a printer queue to our workstations on our domain. Only about 60% of workstations are successfully getting the printer policy.

 

If I run GPRESULT, then it says the machine should be getting the print queue settings.

 

However, when I move a 'faulty' machine out of the hardened OU and into an OU with no linked policy, the printer queue magically appears on the affected workstation.

 

If I then delete the printer of the workstation and move the workstation back to the hardened OU the printer queue is re-installed. Once a machine Is 'fixed', it is fixed properly and I can no-longer replicate the fault on that machine any more... I need to find another faulty machine to test with.

 

So, I was wondering if there are any tools out there which allow me to watch real-time which processes are starting up / stopping or any ideas on how you would deal with this.

 

Thanks in advance,

 

Mike

[twin--turbo]

process monitor?