This has been asked before and nobody has a good answer.
NOM can tell you when a policy was change and what was changed but not who changed it.
You can make NOM email this out to a group of people whenever it happens.
And then whomever did the change would be required to go in and put in a comment - now this means that you have to trust them to put in the comment - but you can see that it tells you what part of the policy was changed - in this example it was the schedules.
This is also kept in the NOM logs for as long as you set it up for - in my case I can got back 1 year to look at these alerts.
|
|
Details for Alert ''Policy: Testing Changed '' |
|
Alert ID: |
296 |
|
Summary : |
Policy: Testing Changed |
|
Description : |
Date: May 27, 2009 11:15 AM
Changed Policy Name: Testing
Master Server: MyMaster
Policy Attributes Modified
Schedules
|
|
Severity : |
Informational |
|
Status : |
Active |
|
Host : |
MYmaster |
|
Raised On : |
May 27, 2009 11:15 AM |
|
Assignment State : |
Unassigned |
|
Assigned To : |
|
|
Updated By : |
|
|
Updated On : |
May 27, 2009 11:15 AM |
|
|
|
|