Solved

Group Policy - Export and compare

Posted on 2010-11-16
6
1,544 Views
Last Modified: 2013-04-19
Hi,

We are looking into consolidating GPO's. Does anyone have any apps or powershell commands that will export all gpo's in a domain and allow us to check which policies settings are being duplicated.

thanks

0
Comment
Question by:ranski
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34147881
There is a way to do this with some pre-built PowerShell cmdlets.  SDM Software has a utility called "SDM GPMC PowerShell Cmdlets 1.3" with 25 prebuilt cmdlets.  One of them is a GPO exporter which exports Group Policy settings.

Here is the blog which discusses the exact process you are wanting to perform.

From that site:

The cool thing about the tool is that you can tell it to export all settings across all GPOs in your domain into a single list. You can then sort that list to find GPOs that have potentially conflicting settings (i.e. different values for the same policy item).

I hope that helps.

Justin
0
 

Author Comment

by:ranski
ID: 34151157
Thanks. Yea i've seen that option. Just wondered if anyone knew of anything that was free or that was already built into the OS.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34155519
That is free.   PowerShell is free to download and install and the Cmdlet which is used is free as well.  You needn't purchase their product.  There is nothing at all built in which will do that, save manually exporting each GPO and then comparing them (with a utility which is not built into the system).
0
Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

 

Author Comment

by:ranski
ID: 34180321
Hi sorry but you are incorrect this is not a free product.
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 34188936
ranski,

If you click through this link:

http://sdmsoftware.com/freeware.php

The Cmdlets I mentioned are the second choice "SDM GPMC PowerShell Cmdlets 1.3  UPDATED VERSION".  If you click through the "Download the SDM GPMC PowerShell Cmdlets 1.3" link, you are taking to a registration page (which you can bypass if you don't want to register).  You are then presented a ZIP file which contains the cmdlets.  If you follow that process, are you being challenged to pay for a product?  I received no such challenges.

Justin
0
 

Expert Comment

by:mcdonamw79
ID: 39095297
Sorry to post to an old topic, but I felt it necessary as the information above is incorrect.  The Blog that was referenced pertained to the powershell cmdlet Export-SDMGPSettings, which is included in the SDM GPO Exporter product (part of the GP Reporting Pak), which is *not free*.

The SDM free cmdlets do not offer a means to export GPO settings themselves.  They only allow creation/manipulation of various GPOs.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently we ran in to an issue while running some SQL jobs where we were trying to process the cubes.  We got an error saying failure stating 'NT SERVICE\SQLSERVERAGENT does not have access to Analysis Services. So this is a way to automate that wit…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question