Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Group Policy - Export and compare

Posted on 2010-11-16
6
Medium Priority
?
1,597 Views
Last Modified: 2013-04-19
Hi,

We are looking into consolidating GPO's. Does anyone have any apps or powershell commands that will export all gpo's in a domain and allow us to check which policies settings are being duplicated.

thanks

0
Comment
Question by:ranski
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34147881
There is a way to do this with some pre-built PowerShell cmdlets.  SDM Software has a utility called "SDM GPMC PowerShell Cmdlets 1.3" with 25 prebuilt cmdlets.  One of them is a GPO exporter which exports Group Policy settings.

Here is the blog which discusses the exact process you are wanting to perform.

From that site:

The cool thing about the tool is that you can tell it to export all settings across all GPOs in your domain into a single list. You can then sort that list to find GPOs that have potentially conflicting settings (i.e. different values for the same policy item).

I hope that helps.

Justin
0
 

Author Comment

by:ranski
ID: 34151157
Thanks. Yea i've seen that option. Just wondered if anyone knew of anything that was free or that was already built into the OS.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 34155519
That is free.   PowerShell is free to download and install and the Cmdlet which is used is free as well.  You needn't purchase their product.  There is nothing at all built in which will do that, save manually exporting each GPO and then comparing them (with a utility which is not built into the system).
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 

Author Comment

by:ranski
ID: 34180321
Hi sorry but you are incorrect this is not a free product.
0
 
LVL 31

Accepted Solution

by:
Justin Owens earned 2000 total points
ID: 34188936
ranski,

If you click through this link:

http://sdmsoftware.com/freeware.php

The Cmdlets I mentioned are the second choice "SDM GPMC PowerShell Cmdlets 1.3  UPDATED VERSION".  If you click through the "Download the SDM GPMC PowerShell Cmdlets 1.3" link, you are taking to a registration page (which you can bypass if you don't want to register).  You are then presented a ZIP file which contains the cmdlets.  If you follow that process, are you being challenged to pay for a product?  I received no such challenges.

Justin
0
 

Expert Comment

by:mcdonamw79
ID: 39095297
Sorry to post to an old topic, but I felt it necessary as the information above is incorrect.  The Blog that was referenced pertained to the powershell cmdlet Export-SDMGPSettings, which is included in the SDM GPO Exporter product (part of the GP Reporting Pak), which is *not free*.

The SDM free cmdlets do not offer a means to export GPO settings themselves.  They only allow creation/manipulation of various GPOs.
0

Featured Post

WatchGuard Case Study: NCR

With business operations for thousands of customers largely depending on the internal systems they support, NCR can’t afford to waste time or money on security products that are anything less than exceptional. That’s why they chose WatchGuard.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question