• Status: Solved
  • Priority: Medium
  • Security: Private
  • Views: 47
  • Last Modified:

Audit GPO


I have around 500 workstations on my domain, some based in the office and some connecting via VPN, I have set up a new GPO which is applying on the 10 workstations I have tested using RSOP, what is the best way of auditing the other 490 workstations to confirm the setting has applied?

Ben S
Ben S
  • 2
1 Solution
yo_beeDirector of Information TechnologyCommented:
This is a daunting task even with some automation.  You can create a delayed scheduled task to run gpresult /X .\file.xml and parse it Excel, but assessing the details will be very hard.

I found this on EE https://www.experts-exchange.com/questions/28962079/Check-applied-GPO's-on-all-domain-computers.html#a41750513
It may be exactly what you are looking for.
Naveen SharmaCommented:
Run gpupdate /force on your client computers to make sure that the group policy had been applied correctly.

Also, gpresult and rsop should be helpful if you suspect that group policy settings are not applied. They will give you which group policies should be applied.

Get in detailed here: https://searchenterprisedesktop.techtarget.com/tip/Four-utilities-can-verify-Group-Policy-object-settings

Group Policy Inventory (GPInventory.exe):

Apart from this you can also check this Group Policy auditing solution to track and audit changes made to Group Policy Objects and even allow you to rollback: https://www.lepide.com/lepideauditor/group-policy-auditing.html
yo_beeDirector of Information TechnologyCommented:
There were multiple suggestions in your accepted solution, but you did highlight what solution worked for you.   To help others could you let us know what solution worked for you.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now