PowerTip: Use PowerShell to Get a Listing of All GPOs in a Domain

Summary: Use a Windows PowerShell cmdlet from the RSAT tools to display all GPOs defined in a domain.

Hey, Scripting Guy! Question How can I get a listing of all the GPOs defined in my domain?

Hey, Scripting Guy! Answer Use the Get-GPO cmdlet from the RSAT tools. Instead of specifying a GPO name or GUID, use the –all switch, as shown here.

Get-GPO -all

Comments (2)

  1. mredwilson says:

    @_Emin_ You are correct, PowerShell does not bypass security, and if you do not have permissions to the GPO you will not be able to correctly run the command. You can launch PowerShell using runas with the appropriate credentials, or use PowerShell remoting and create a session with the appropriate permissions.

  2. _Emin_ says:


    This will only list GPO where you have at least read access.

    In my environment, I have a Group Policy that targets only active directory computer objects that has some security permissions that prevents domain users from reading it.

    I get only all the GPO if I execute the above cmdlet with Domain Admin credentials.

Skip to main content