none
Script for auditing what GPO's are being applied to specifically listed OUs in non-2012 environments? RRS feed

  • Question

  • As part of an OU migration we need to audit the domains for what GPO's are being applied to what GPO's. We need to look at specific OUs and see what GPOs there are to affect them. The problem is that Get-GPO isn't available to us at the moment as we are non-2012 in prod domains. I've found some tools, but wanted to see if there are scripts that we can use to avoid using third party MSI's. Any tips?
    Tuesday, June 10, 2014 9:28 PM

Answers

  • Went with this script:

    $Date = (Get-Date).tostring("MM-dd")

    Get-QADObject -type organizationalunit -sizelimit 0 -DontUseDefaultIncludedProperties | %{ (Get-GPInheritance -Target $_).GPOLinks } | select DisplayName,Enabled,Enforced,Target | Export-csv "C:\Ambiguous Folder\$Date-GPOLinkInfo.csv" -NoTypeInformation

    Wednesday, June 18, 2014 5:47 PM

All replies

  • There is a property on each OU with a list of lined GPOs.

    Look in repository for scripts that retrieve this.  There are a few I believe.


    ¯\_(ツ)_/¯

    Tuesday, June 10, 2014 9:49 PM
  • Went with this script:

    $Date = (Get-Date).tostring("MM-dd")

    Get-QADObject -type organizationalunit -sizelimit 0 -DontUseDefaultIncludedProperties | %{ (Get-GPInheritance -Target $_).GPOLinks } | select DisplayName,Enabled,Enforced,Target | Export-csv "C:\Ambiguous Folder\$Date-GPOLinkInfo.csv" -NoTypeInformation

    Wednesday, June 18, 2014 5:47 PM