asked on

Need to get a dump of all Group Policy Objects on AD

Hello there.

I am looking for a tool or command line util that will allow me to dump a list of group policy objects from the AD for users and computer. We need to do an audit on a site of what GPs they have in place and going through it by hand is very time consuming. Plus, I need to sit down with the techs who set it up and go through the pertinent items and determine the thought process at the time.

Anyone know of a tool or util that will do this? I'm not above purchasing one, if that is what it takes, but I would have thought something like gpotool.exe from the ResKit would have been able to walk the tree and extract this info.

Thank you.

Howard

richth

Howard,
One of these should work for you...

The following list provides a brief description of each command-line tool and its functionality:

dsadd--Adds objects to the directory. For more information, see Dsadd.
dsget--Displays properties of objects in the directory. For more information, see Dsget.
dsmod--Modifies select attributes of an existing object in the directory. For more information, see Dsmod.
dsquery--Finds objects in the directory that match a specified search criteria. For more information, see Dsquery.
dsmove--Moves an object from its current location to a new parent location. For more information, see Dsmove.
dsrm--Removes an object, the complete subtree under an object in the directory, or both. For more information, see Dsrm.

Let me know if this does it for you.

richth

ASKER CERTIFIED SOLUTION

4auHuk

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

hglobus

ASKER

Thanks for the input folks. The GPMC util sees to work well. I need some help getting the data into a usable format, but I'm woring on it.

Thanks again.

Howard