Hello, my name is Kurt. I'm a senior principal engineer working with the GSE team.
This video is dedicated to demonstrating how to use windows powershell to quickly gather active directory group policy information. We'll look at using powershell commands to collect a list of GPO s how to bring up a specific domain GPO and finally how to compile a detailed report on all domain GPO S. So once again, our first command is going to gather all the GPS we have in a specific domain. We have to designate our domain in this specific command. We have uh two other commands that will call up a GPO either by name or by good. And the last command we're going to look at is one that will gather all the GPO S and detailed information about them.
So let's go ahead and look at each command individually. So this is a command that will once again get all the GPO S that can be found for my TS domain. And let's go ahead and kick that one off. So we have a list of uh several different GPO S that have been created within this domain. We have uh the default domain policy, the uh default domain controller policy and several other user policies that have been specified. The information that you're gonna get back will be uh some of the information uh related to the domain itself. Um The ID for the GPO when it was created and any changes that were made uh in the way of a modification, it will specify the date when that occurred.
Now, the next command that we want to take a look at. So if we have one specific gpo, that we want to get general information on all we have to do is specify the name of that GPO. And we get the same information that we just saw a few minutes ago. Now, if we want, we can also specify and bring up information about an active director GPO by using the Guid. So this is actually the ID that we found being returned for my team underscore WP GP that was created and it's gonna return all the same information. Now, the last command and the one that actually may be the most beneficial of all of them is our command that will gather the information and push that into a report. So let's go ahead and bring him up. Now, this uh specific command is a little bit different.
It's get GPO report. We're specifying all in this case, it's all the GPO S that can be found in my TS domain. It's gonna return that in HTML format. We can also do this uh returning it in XML format. For this particular example, we're gonna go ahead and use HTML and we want to specify a path for this uh specific return to be written to. In this case, uh We're gonna create a report called GPO reports all. So let's go ahead and kick it off and let's take a look and see if our report actually was generated. And yes, it was. And as you can tell it's in HTML format.
Now, this specific policies themselves, we can uh open up all the different subcategories here to actually figure out exactly what these group policies are doing. Uh what they're related to the creation date. Uh The delegation who these GPO S are actually being um directed toward when they're being applied. So, needless to say this is uh this can be beneficial information, especially if you're trying to troubleshoot a given GPO issue.
Obviously, you can get all this information through the gooey within Windows itself. But um if you're trying to save time, this is one quick and easy way to do it by just using these simple uh commands right here. All right. That concludes our demo on using Windows powershell to quickly collect active directory group policy information.
Thank you for watching.
