Solved

Group Policy - Export and compare

Posted on 2010-11-16
6
1,516 Views
Last Modified: 2013-04-19
Hi,

We are looking into consolidating GPO's. Does anyone have any apps or powershell commands that will export all gpo's in a domain and allow us to check which policies settings are being duplicated.

thanks

0
Comment
Question by:ranski
  • 3
  • 2
6 Comments
 
LVL 31

Expert Comment

by:DrUltima
ID: 34147881
There is a way to do this with some pre-built PowerShell cmdlets.  SDM Software has a utility called "SDM GPMC PowerShell Cmdlets 1.3" with 25 prebuilt cmdlets.  One of them is a GPO exporter which exports Group Policy settings.

Here is the blog which discusses the exact process you are wanting to perform.

From that site:

The cool thing about the tool is that you can tell it to export all settings across all GPOs in your domain into a single list. You can then sort that list to find GPOs that have potentially conflicting settings (i.e. different values for the same policy item).

I hope that helps.

Justin
0
 

Author Comment

by:ranski
ID: 34151157
Thanks. Yea i've seen that option. Just wondered if anyone knew of anything that was free or that was already built into the OS.
0
 
LVL 31

Expert Comment

by:DrUltima
ID: 34155519
That is free.   PowerShell is free to download and install and the Cmdlet which is used is free as well.  You needn't purchase their product.  There is nothing at all built in which will do that, save manually exporting each GPO and then comparing them (with a utility which is not built into the system).
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:ranski
ID: 34180321
Hi sorry but you are incorrect this is not a free product.
0
 
LVL 31

Accepted Solution

by:
DrUltima earned 500 total points
ID: 34188936
ranski,

If you click through this link:

http://sdmsoftware.com/freeware.php

The Cmdlets I mentioned are the second choice "SDM GPMC PowerShell Cmdlets 1.3  UPDATED VERSION".  If you click through the "Download the SDM GPMC PowerShell Cmdlets 1.3" link, you are taking to a registration page (which you can bypass if you don't want to register).  You are then presented a ZIP file which contains the cmdlets.  If you follow that process, are you being challenged to pay for a product?  I received no such challenges.

Justin
0
 

Expert Comment

by:mcdonamw79
ID: 39095297
Sorry to post to an old topic, but I felt it necessary as the information above is incorrect.  The Blog that was referenced pertained to the powershell cmdlet Export-SDMGPSettings, which is included in the SDM GPO Exporter product (part of the GP Reporting Pak), which is *not free*.

The SDM free cmdlets do not offer a means to export GPO settings themselves.  They only allow creation/manipulation of various GPOs.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This article will help you understand what HashTables are and how to use them in PowerShell.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now