Solved

Seeing List of all GPOs with Certain Feature

Posted on 2011-09-12
7
347 Views
Last Modified: 2012-05-12
How can I see a list of all GPOs that contain applocker policies?
0
Comment
Question by:Joseph Moody
7 Comments
 
LVL 11

Expert Comment

by:Ove
ID: 36525240
in win2008 (an newer) you may use the GPO-result-feature at the bottom of the gpo-configuration-mmc.
create a report for a specified user and have a look for the applied gpo's

Ove
0
 
LVL 22

Author Comment

by:Joseph Moody
ID: 36525251
Thanks Ove. That only shows applocker policies if they apply to that computer. I need to be able to see all applocker settings no matter who they apply to.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36525329
There is a search in GP http://blogs.technet.com/b/grouppolicy/archive/2009/03/13/search-gpo-how-to-find-a-group-policy-object.aspx

...looking in my lab doesn't look like you can search for applocker, you can check though.  That feature can be improved for sure (they should let you pick the setting)

I was looking at the GP powershell cmdlets and didn't see a function.  Darren may have one in his  http://www.sdmsoftware.com/powershell/new-version-of-gpmc-powershell-cmdlets-released/

I'm going to add the powershell zone too.

Thanks

Mike
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36525345
You might want to give the GPMC scripts a try. I think there may be one that does what your looking for called "List GPO by policy extension"

http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx
http://msdn.microsoft.com/en-us/library/aa814151%28v=vs.85%29.aspx#_win32_listing_gpos_by_policy_extension
0
 
LVL 11

Expert Comment

by:Ove
ID: 36525356
You may also "grep" through the folder c:\Windows\sysvol\domain\Policies and it's subfolders for the special keywords.

Ove
0
 
LVL 22

Author Closing Comment

by:Joseph Moody
ID: 36538844
We are looking into GPO Compare to do this! Thanks!
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question