Link to home
Start Free TrialLog in
Avatar of IT _Admin0723
IT _Admin0723Flag for United States of America

asked on

Querying Group Policy - Restricted Group

Hello experts,

Scenario: We are receiving ESM alerts indicating that some of the GPOs we have in the domain have NT Authority\Authenticated Users part of the BUILTIN\Power Users group. We have 400 GPOs in a domain that we need to query which ones are the culprit.
 
Question is:

2) Is there a script that you guys can share to capture these GPOs that have "NT Authority\Authenticated Users" that is a member of the BUILTIN\Power Users Group.
3) And finally a script to remove the "Authenticated Users" from this group of the identified GPOs.

Thank you!
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial