Forum Discussion
d_irving
Aug 08, 2022Copper Contributor
Policy Analyzer showing incorrect values
Today I created a backup of my group policy objects and compared them to Microsoft's baselines. But, the GPO backup seems to be displaying the wrong values in Policy Analyzer. As seen in...
AaronMargosis_Tanium
Aug 09, 2022Iron Contributor
d_irving Well, it's showing that Policy Analyzer is correctly rendering the GPOs you backed up.
The syntax for the [Registry Values] part of the security template is:
key\valuename=type,data
type 4 is REG_DWORD, and it's set to 0, which is what Policy Analyzer is reporting.
Are you certain that the GPOs you're backing up and importing into Policy Analyzer are the same ones that you're looking at on the right-hand side of the screenshot you posted?
d_irving
Aug 09, 2022Copper Contributor
Yes, I backed up all the GPO's and put them into the policy analyzer.
The policy analyzer shows the setting is from the Default Domain Policy, but the Default Domain Policy is shown on the right with different settings.
The policy analyzer shows the setting is from the Default Domain Policy, but the Default Domain Policy is shown on the right with different settings.
- AaronMargosis_TaniumAug 09, 2022Iron ContributorThe discrepancy is between the GPO backup and the GPO you're displaying. Policy Analyzer is interpreting the backup correctly.
- d_irvingAug 09, 2022Copper ContributorSo the question is, why is the GPO backup wrong?
- AaronMargosis_TaniumAug 09, 2022Iron ContributorPerhaps start over and double-check the entire process:
1. Are you sure you're backing up the correct GPO(s)?
2. Are you sure you're importing the correct backup(s) into Policy Analyzer, and no other backups?