?
Solved

Seeing List of all GPOs with Certain Feature

Posted on 2011-09-12
7
Medium Priority
?
362 Views
Last Modified: 2012-05-12
How can I see a list of all GPOs that contain applocker policies?
0
Comment
Question by:Joseph Moody
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 11

Expert Comment

by:Ove
ID: 36525240
in win2008 (an newer) you may use the GPO-result-feature at the bottom of the gpo-configuration-mmc.
create a report for a specified user and have a look for the applied gpo's

Ove
0
 
LVL 22

Author Comment

by:Joseph Moody
ID: 36525251
Thanks Ove. That only shows applocker policies if they apply to that computer. I need to be able to see all applocker settings no matter who they apply to.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 36525329
There is a search in GP http://blogs.technet.com/b/grouppolicy/archive/2009/03/13/search-gpo-how-to-find-a-group-policy-object.aspx

...looking in my lab doesn't look like you can search for applocker, you can check though.  That feature can be improved for sure (they should let you pick the setting)

I was looking at the GP powershell cmdlets and didn't see a function.  Darren may have one in his  http://www.sdmsoftware.com/powershell/new-version-of-gpmc-powershell-cmdlets-released/

I'm going to add the powershell zone too.

Thanks

Mike
0
Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

 
LVL 35

Expert Comment

by:Joseph Daly
ID: 36525345
You might want to give the GPMC scripts a try. I think there may be one that does what your looking for called "List GPO by policy extension"

http://wmug.co.uk/blogs/1972/archive/2006/05/01/39.aspx
http://msdn.microsoft.com/en-us/library/aa814151%28v=vs.85%29.aspx#_win32_listing_gpos_by_policy_extension
0
 
LVL 11

Expert Comment

by:Ove
ID: 36525356
You may also "grep" through the folder c:\Windows\sysvol\domain\Policies and it's subfolders for the special keywords.

Ove
0
 
LVL 22

Author Closing Comment

by:Joseph Moody
ID: 36538844
We are looking into GPO Compare to do this! Thanks!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question