Solved

Group Policy - Export and compare

Posted on 2010-11-16
6
1,524 Views
Last Modified: 2013-04-19
Hi,

We are looking into consolidating GPO's. Does anyone have any apps or powershell commands that will export all gpo's in a domain and allow us to check which policies settings are being duplicated.

thanks

0
Comment
Question by:ranski
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34147881
There is a way to do this with some pre-built PowerShell cmdlets.  SDM Software has a utility called "SDM GPMC PowerShell Cmdlets 1.3" with 25 prebuilt cmdlets.  One of them is a GPO exporter which exports Group Policy settings.

Here is the blog which discusses the exact process you are wanting to perform.

From that site:

The cool thing about the tool is that you can tell it to export all settings across all GPOs in your domain into a single list. You can then sort that list to find GPOs that have potentially conflicting settings (i.e. different values for the same policy item).

I hope that helps.

Justin
0
 

Author Comment

by:ranski
ID: 34151157
Thanks. Yea i've seen that option. Just wondered if anyone knew of anything that was free or that was already built into the OS.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34155519
That is free.   PowerShell is free to download and install and the Cmdlet which is used is free as well.  You needn't purchase their product.  There is nothing at all built in which will do that, save manually exporting each GPO and then comparing them (with a utility which is not built into the system).
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:ranski
ID: 34180321
Hi sorry but you are incorrect this is not a free product.
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 34188936
ranski,

If you click through this link:

http://sdmsoftware.com/freeware.php

The Cmdlets I mentioned are the second choice "SDM GPMC PowerShell Cmdlets 1.3  UPDATED VERSION".  If you click through the "Download the SDM GPMC PowerShell Cmdlets 1.3" link, you are taking to a registration page (which you can bypass if you don't want to register).  You are then presented a ZIP file which contains the cmdlets.  If you follow that process, are you being challenged to pay for a product?  I received no such challenges.

Justin
0
 

Expert Comment

by:mcdonamw79
ID: 39095297
Sorry to post to an old topic, but I felt it necessary as the information above is incorrect.  The Blog that was referenced pertained to the powershell cmdlet Export-SDMGPSettings, which is included in the SDM GPO Exporter product (part of the GP Reporting Pak), which is *not free*.

The SDM free cmdlets do not offer a means to export GPO settings themselves.  They only allow creation/manipulation of various GPOs.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
The following article is intended as a guide to using PowerShell as a more versatile and reliable form of application detection in SCCM.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question