<div>
Thanks for the advice. I'll go ahead and do this.
</div>


Thanks for the advice. I'll go ahead and do this.

<div>
I know this is a very old thread, but when I searched for this today this was one of the first hits, so an update might help anyone like me searching for this.<br />
<br />
Microsoft now have a Policy Analyzer tool, which can be used to compare different policy objects, and will highlight policy conflicts, etc. &nbsp;The MS blog post with the download link is available here - <a href="https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/" rel="ugc">https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/</a>
</div>


I know this is a very old thread, but when I searched for this today this was one of the first hits, so an update might help anyone like me searching for this.

Microsoft now have a Policy Analyzer tool, which can be used to compare different policy objects, and will highlight policy conflicts, etc.  The MS blog post with the download link is available here - https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/ [https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/]

<div>
<div class="content wysiwyg-content">
Is there a tool or command that i can run that will tell me if there are any policies set in group policy that conflict with each other. Like Computer/User policies conflicting, or Domain/ou policies. There seems to be way to many policies set in our environment and user logon is taking a long time and i think this may have a big role in it.
</div>
</div>


Is there a tool or command that i can run that will tell me if there are any policies set in group policy that conflict with each other. Like Computer/User policies conflicting, or Domain/ou policies. There seems to be way to many policies set in our environment and user logon is taking a long time and i think this may have a big role in it.

How to check for group policy conflicts

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).