http://www.verboon.info/index.php/2011/07/get-the-latest-version-of-the-gpotool-exe/
gpotool /verbose > gpo.txt
C:\GPMC>gpotool /verbose
Domain: stc.com
Validating DCs...
Available DCs:
DC.stc.com
Searching for policies...
Found 3 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Policy OK
Details:
------------------------------------------------------------
DC: DC.stc.com
Friendly name: Default Domain Policy
Created: 11/9/2012 6:24:53 PM
Changed: 11/9/2012 6:30:26 PM
DS version: 0(user) 3(machine)
Sysvol version: 0(user) 3(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A
28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D
0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-
00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04fB984F9}
Friendly name: Default Domain Controllers Policy
Policy OK
Details:
------------------------------------------------------------
DC: DC.stc.com
Friendly name: Default Domain Controllers Policy
Created: 11/9/2012 6:24:53 PM
Changed: 11/9/2012 6:24:53 PM
DS version: 0(user) 1(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A
0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {99C42E73-A185-4646-A756-77EBBD58F49E}
Friendly name: BobFree
Policy OK
Details:
------------------------------------------------------------
DC: DC.stc.com
Friendly name: BobFree
Created: 11/16/2012 9:20:05 PM
Changed: 11/16/2012 9:20:05 PM
DS version: 0(user) 0(machine)
Sysvol version: 0(user) 0(machine)
Flags: 0 (user side enabled; machine side enabled)
User extensions: not found
Machine extensions: not found
Functionality version: 2
------------------------------------------------------------
============================================================
Policies OK
C:\GPMC>
It looks like the empty GPOs will be the ones with:
User extensions: not found
Machine extensions: not found
Someone with half a brain should be able to use regex to parse a text file with
800+ GPOs in it to find those! Since I only have .001 of a brain, I can't do
this! :)
Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com<http://www.carlwebster.com/>
From: Free, Bob [mailto:r...@pge.com]
Sent: Friday, November 16, 2012 3:24 PM
To: NT System Admin Issues
Subject: RE: GPO Hell (Unlinked/Empty GPOs)
Web-
There are canned scripts for unlinked, orphaned, disabled and empty sec filter
but not empty settings as I recall.
Low-tech way if in a hurry would be run the GetReportsForAllGPOs.wsf and look
at the xml, the really small files would likely be empty. Very low tech but it
would show you where to look.
I'll have a peek at Darren's posh module but I don't think it does it either.
--bob
From: Webster [mailto:webs...@carlwebster.com]
Sent: Friday, November 16, 2012 1:15 PM
To: NT System Admin Issues
Subject: RE: GPO Hell (Unlinked/Empty GPOs)
Bob,
I thought one of the scripts also did empty GPOs?
Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com<http://www.carlwebster.com/>
From: Free, Bob [mailto:r...@pge.com]
Sent: Friday, November 16, 2012 3:01 PM
To: NT System Admin Issues
Subject: RE: GPO Hell (Unlinked/Empty GPOs)
FindUnlinkedGPOs.wsf in the GPMC scripts should solve the first issue. Have to
think about the second one a bit more :)
From: Guyer, Don [mailto:dgu...@che.org]
Sent: Friday, November 16, 2012 12:38 PM
To: NT System Admin Issues
Subject: GPO Hell (Unlinked/Empty GPOs)
Greetings,
We have over 800 GPOs, org-wide, and I'm in cleanup mode. Have
been trying to find a script/utility to run that will list out unlinked GPOs
and/or ones with no settings. Haven't had much luck.
~
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
