Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Group Policy - Export and compare

Posted on 2010-11-16
6
Medium Priority
?
1,580 Views
Last Modified: 2013-04-19
Hi,

We are looking into consolidating GPO's. Does anyone have any apps or powershell commands that will export all gpo's in a domain and allow us to check which policies settings are being duplicated.

thanks

0
Comment
Question by:ranski
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34147881
There is a way to do this with some pre-built PowerShell cmdlets.  SDM Software has a utility called "SDM GPMC PowerShell Cmdlets 1.3" with 25 prebuilt cmdlets.  One of them is a GPO exporter which exports Group Policy settings.

Here is the blog which discusses the exact process you are wanting to perform.

From that site:

The cool thing about the tool is that you can tell it to export all settings across all GPOs in your domain into a single list. You can then sort that list to find GPOs that have potentially conflicting settings (i.e. different values for the same policy item).

I hope that helps.

Justin
0
 

Author Comment

by:ranski
ID: 34151157
Thanks. Yea i've seen that option. Just wondered if anyone knew of anything that was free or that was already built into the OS.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34155519
That is free.   PowerShell is free to download and install and the Cmdlet which is used is free as well.  You needn't purchase their product.  There is nothing at all built in which will do that, save manually exporting each GPO and then comparing them (with a utility which is not built into the system).
0
How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

 

Author Comment

by:ranski
ID: 34180321
Hi sorry but you are incorrect this is not a free product.
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 2000 total points
ID: 34188936
ranski,

If you click through this link:

http://sdmsoftware.com/freeware.php

The Cmdlets I mentioned are the second choice "SDM GPMC PowerShell Cmdlets 1.3  UPDATED VERSION".  If you click through the "Download the SDM GPMC PowerShell Cmdlets 1.3" link, you are taking to a registration page (which you can bypass if you don't want to register).  You are then presented a ZIP file which contains the cmdlets.  If you follow that process, are you being challenged to pay for a product?  I received no such challenges.

Justin
0
 

Expert Comment

by:mcdonamw79
ID: 39095297
Sorry to post to an old topic, but I felt it necessary as the information above is incorrect.  The Blog that was referenced pertained to the powershell cmdlet Export-SDMGPSettings, which is included in the SDM GPO Exporter product (part of the GP Reporting Pak), which is *not free*.

The SDM free cmdlets do not offer a means to export GPO settings themselves.  They only allow creation/manipulation of various GPOs.
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 10 came with  a lot of built in applications, Some organisations leave them there, some will control them using GPO's. This Article is useful for those who do not want to have any applications in their image (example:me).
A quick Powershell script I wrote to find old program installations and check versions of a specific file across the network.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question