Listing all GPOs in the current forest

This post was written by Judith, a technical writer for Group Policy. This is the second post in a series on ways to use Powershell with Group Policy. See the first post on getting started with RSAT and Group Policy Let’s say I have a forest and I’d like to document a listing of all…


RSAT & GP Cmdlets

This post was written by Judith, a technical writer for Group Policy. This will be the first post in a series on ways to use Powershell with Group Policy I wanted to play around with the Group Policy cmdlets. These are installed on Windows Server 2008 R2 automatically when Group Policy is installed. But what…


Group Policy & Scripting

Hey, Scripting Guy! has a great series of posts around Group Policy & scripting: Using group policy cmdlets for backup and restore Test AD replication with group policy cmdlets How to compare 2 GPOs offline (Part II)


Group Policy at Tech Ed 2009 keynote: Mark Russinovich demos Group Policy PowerShell cmdlets

During this morning’s keynote at TechEd 2009 in Los Angeles, technical fellow Mark Russinovich demonstrated the Set-GPRegistryValue cmdlet. He points out the power of scripting; a few lines created a GPO, configured a registry value, and linked it to an OU. A few changes would link that same GPO to any number of OUs, domains,…


Microsoft Management Summit 2009

I just got back from another great MMS in Las Vegas and I’d like to thank everyone who stopped by the booth, attended the Group Policy-related sessions, and asked great questions about Group Policy and AGPM (thanks to Chris for Tweeting about it!). I’m so glad to see that more and more people are using…


Check a setting in all GPO’s (Security, ADMX, and more)

  You configured a setting in one GPO and want to know what that setting is across all GPO’s.   You want to check that a setting is not being overwritten by another GPO in the same domain (without checking through every settings report).   Sound familiar?   Well, we’ve heard you. And made something…


Check a setting in all GPO’s continued (scripts, firewall, GP Preferences and more)

 I mentioned this in the last post, here are some more examples.  To download the script, check the ‘Attachments’ link by clicking on this post’s title and then scrolling to the bottom. Quick refresher:   This script’s usage is as follows:   SearchGPOsForSetting.ps1 [–IsComputerConfiguration] <Boolean> [-Extension] <String> [-Where] <String> [-Is] <String> [[-Return] <String>] [[-DomainName] <String>]…


PowerShell Script: Backup all GPOs that have been modified this month

The scene: Backups take up space, but they’re a crucial part of GPO management. Ideally, one would do regular backups (monthly? weekly? your call) but only of the GPOs that have changed. This script will do that for you and print out a nice settings report of each GPO as it’s being backed up. The…


Group Policy Cmdlets, Replication &amp; the ‘-Server’ Parameter

Hello GP Junkies! My name is Bryan Garretson, and I want to let you know about an interesting way we were able to leverage the new PowerShell cmdlets available in Windows Server 2008 R2 / Windows 7: to anticipate and test around replication delays in certain configurations.   When we were testing RODC read ops, we…