Solved

Seeing List of all GPOs with Certain Feature

Posted on 2011-09-12
7
340 Views
Last Modified: 2012-05-12
How can I see a list of all GPOs that contain applocker policies?
0
Comment
Question by:Joseph Moody
7 Comments
 
LVL 11

Expert Comment

by:Ove
ID: 36525240
in win2008 (an newer) you may use the GPO-result-feature at the bottom of the gpo-configuration-mmc.
create a report for a specified user and have a look for the applied gpo's

Ove
0
 
LVL 22

Author Comment

by:Joseph Moody
ID: 36525251
Thanks Ove. That only shows applocker policies if they apply to that computer. I need to be able to see all applocker settings no matter who they apply to.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36525329
There is a search in GP http://blogs.technet.com/b/grouppolicy/archive/2009/03/13/search-gpo-how-to-find-a-group-policy-object.aspx

...looking in my lab doesn't look like you can search for applocker, you can check though.  That feature can be improved for sure (they should let you pick the setting)

I was looking at the GP powershell cmdlets and didn't see a function.  Darren may have one in his  http://www.sdmsoftware.com/powershell/new-version-of-gpmc-powershell-cmdlets-released/

I'm going to add the powershell zone too.

Thanks

Mike
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36525345
You might want to give the GPMC scripts a try. I think there may be one that does what your looking for called "List GPO by policy extension"

http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx
http://msdn.microsoft.com/en-us/library/aa814151%28v=vs.85%29.aspx#_win32_listing_gpos_by_policy_extension
0
 
LVL 11

Expert Comment

by:Ove
ID: 36525356
You may also "grep" through the folder c:\Windows\sysvol\domain\Policies and it's subfolders for the special keywords.

Ove
0
 
LVL 22

Author Closing Comment

by:Joseph Moody
ID: 36538844
We are looking into GPO Compare to do this! Thanks!
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A procedure for exporting installed hotfix details of remote computers using powershell
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question