Need info for group policy object


I am working with group policy objects in a complex  (many ou) active domain infrastructure.

How does one see which ou(s) a particular gpo is linked to?


Mark BudmanAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
This is one of the tabs in the group policy management console. It'll show each link and its status.
From the GPMC snapin select OU, should show gpo's linked there.
Kevin StanushApplication DeveloperCommented:
One of the many advanced Active Directory features of Hyena is that you can multi-select as many policies as needed, right click, select "Show Policies", and get a customizable view of every linked policy to the selected OUs.  If you have a few policies or OUs, doing it one-by-one using the GPMC is OK, but once you get into a few dozen policies and a large collection of OUs, that approach isn't going to work.

Another feature in Hyena, if the GPMC is installed, is that the GPMC policy report can be run on all selected policies; the policy name is used to build the HTML output file.  Using this feature, you can in a few minutes generate the familiar GPMC report for hundreds of policies at one time.
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Mark BudmanAuthor Commented:
OK - let's try this again. I am not looking for any third party solutions.

I am just want to know (if the possibility exists) the exact spot where I can view the OU that the group policy object is linked to.  Telling me to clikc on one of the tabs does not provide this information.

All group policy objects for a domain are listed within the "Group Policy Object" subfolder for the domain.

Within this folder is a group policy object called "office-printers"

I want to be able to look this GPO and see which Organizational Units (OU) are linked to this GPO.

Thank you.
Cliff GaliherCommented:
Criticizing those volunteers who have offered to help does not seem like a good way to encourage more people to chime in.  With that said, I think there is a reasonable expectation that someone managing a "complex" infrastructure has some basic computing skills.

"Telling me to clikc (sic) one one of the tabs"    If you can't bother to click on one of the FOUR tabs and look, I don't think we can help you.

Oh, and by the way, the info you want is on the DEFAULT tab (so no clicking required.)

As you can see here, the box JUST UNDER the default tab lists the various containers (OU, domain, other) that the policy is linked to and its current status.  10 seconds of effort in GPMC yourself would have revealed the same.  And my initial comment did say this is right in the GPMC.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mark BudmanAuthor Commented:
Hello Cliff,

I apologize if I offended you. It was not my attention. It was frustration speaking as I had looked at the tabs prior to posting and did not notice what you had pointed out in your last answer.

One of the reasons that I could not find what I was looking for is the group policy object I was reviewing had nothing displayed in "location"

What you had pointed out with the screen shots is the exact answer I was looking for.

Thank you for your assistance.

Kevin StanushApplication DeveloperCommented:
I understand what you are after, ie going to a policy and asking with OU the policy is linked to, but that is impossible.  AD has a one-way relationship between Policy objects and the OUs, and its OU > Policy(s).  If you look at all of the directory attributes for a policy, you won't find much of anything, and no list of the OUs that the policy is linked to.  Instead, you have to go to the OU, and see that policies are linked to it, and then the next, etc.  Put another way, if you want to create a map of the policies and all OUs, you have to get each and every OU, look at the policy links, and build a table.

If you are interested, the OU has an attribute named gpLink that has the linked policies.  But the policy DN in this attribute uses the GUID of the policy not the name, so its hard to just process this attribute directly.

I'm sure a Powershell fanatic can build a script to process it, but there are a lot of potential complexities unless some magic PS function can be made to take care of the GUID to policy name translation.  Hyena uses hundreds of lines of code to do this task.

But as Cliff pointed out, if you run the GPMC, and then go to the left window where you can view the policies, you can click on each one and see what each is linked to.  The GPMC isn't 'magic', if you notice when it starts up, it does some scanning stuff, that is when its building its table of OU to policy relationships, so that you can click on the policy and see what its linked to, as that information does not exist.  But the GPMC will require that you click on each one, alas, I don't know of a way to create a comprehensive list without the use of 3rd party software :)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.