I've inherited a network, in my new position, that I'm in the process of getting accredited and then online. For now it's completely offline and all my updates are done locally at the machine(s). Using the results of my Retina scans I research my vulnerabilities, download the appropriate patches/fixes and then install them on the respective server(s). However, a large percentage of my audits show "simple fixes" in the form of registry changes, security policy edits, etc. Long story short, I've made these changes numerous times only to find them reappearing in my scans and most-to-all of the items reverting back to what I changed them from.
I've given myself, as high as, enterprise admin rights to no avail. After more and more research and attempts, I noticed that the GPO(s) on this network is completely screwed and I'm having the hardest time narrowing down which GPO is "in control". Does anyone have a tool or anything that may help me narrow down the master GPO? Or any helpful advice on my situation?
