How to I determine what GPOs are applied to a security group?

All,

We have more than 500 GPOs, applied on multiple security groups. I would like to check one security group that which polices are applied on it.

Regards.
Se LaiSystem Administrator Asked:
Who is Participating?
 
McKnifeCommented:
GPOs are just files and they have ACLs. Do you know how to use a script to query whether a certain security group has apply access to a file? Then you have found the solution.

Use icacls on such a policy file and see if you can create a script by yourself, else, I could help. Shaun's method is another way although it will list all filtering for all GPOs and the output might be too much for what you need.
0
 
Tom CieslikIT EngineerCommented:
One of method is run in command prompt

gpresult /R

on member of security group computer

You'll see all policies that was applied to this computer
0
 
Se LaiSystem Administrator Author Commented:
Finding applied policies on computer or users is ok, I mean I can check but how to find those multiple applied polices on a security group.... I am removing ABC group from GPOs if I find where we used this group I can easily visit and delete it from that GPO but checking a every gpo object will be hard.
0
Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

 
Tom CieslikIT EngineerCommented:
Also, if you are domain admin, you can run MMC in your run field, then from MMC go to Fille - Add Remmove Anap In

Select Group Policy Editor
Click on Browse button,

Navigate to Security Group and you should see list of policies linked to this group
0
 
Se LaiSystem Administrator Author Commented:
I tried this solution but it didn't work for me. I can't see security groups there.
0
 
Shaun VermaakTechnical Specialist/DeveloperCommented:
We have more than 500 GPOs, applied on multiple security groups. I would like to check one security group that which polices are applied on it.
You have too many GPOs. Combine them using preferences and item level filtering.
Delete empty, unlinked and zero scoped GPOs.

This can be done as an EE gig.

As for your question, use Get-GPOReport to a single XML file and query that
0
 
McKnifeCommented:
Author has forgotten to close, it seems. Please feel free to return with follow up questions. Both selected solutions are a way to find what he was looking for.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.