Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


How to check for group policy conflicts

Posted on 2008-11-03
Medium Priority
Last Modified: 2012-05-05
Is there a tool or command that i can run that will tell me if there are any policies set in group policy that conflict with each other. Like Computer/User policies conflicting, or Domain/ou policies. There seems to be way to many policies set in our environment and user logon is taking a long time and i think this may have a big role in it.
Question by:jkpc21
LVL 13

Accepted Solution

martin_babarik earned 2000 total points
ID: 22869422
there isn't such tool to determine the conflict, because this kind of conflict will actually never happen - there is always exactly one setting from some of the group policy obejcts, that is used.
But what you can do is to determine the winning policy - or by using other words: to determine from which GPO the policy comes. For this you can use Group Policy Management snap-in. It contains Group Policy Results wizard, which will determine the policies for particular user and computer.

Author Closing Comment

ID: 31512800
Thanks for the advice. I'll go ahead and do this.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question