Hi,
I've got a bit of a funny here which i'm hoping some kind soul can assist with.
We run a hardened Workstation configuration which I have recently inherited and our Workstation Baseline GPO clearly disables a number of Windows services. In addition to this, there are other random services disabled too for whatever reason. I don't know.
My problem is this... I have a GPO which deploys a printer queue to our workstations on our domain. Only about 60% of workstations are successfully getting the printer policy.
If I run GPRESULT, then it says the machine should be getting the print queue settings.
However, when I move a 'faulty' machine out of the hardened OU and into an OU with no linked policy, the printer queue magically appears on the affected workstation.
If I then delete the printer of the workstation and move the workstation back to the hardened OU the printer queue is re-installed. Once a machine Is 'fixed', it is fixed properly and I can no-longer replicate the fault on that machine any more... I need to find another faulty machine to test with.
So, I was wondering if there are any tools out there which allow me to watch real-time which processes are starting up / stopping or any ideas on how you would deal with this.
Thanks in advance,
Mike