Forum Discussion
jemfernandez
Jun 28, 2023Copper Contributor
Policy Analyzer - Compare all settings
Is there a way on the Policy Analyzer to include comparison for all 3000+ GPO settings?
- Jun 28, 2023Policy Analyzer analyzes GPO backups, so a setting needs to be configured in one or more GPOs for it to show in a comparison.
jemfernandez
Jun 28, 2023Copper Contributor
Hi LeonPavesic
Thank you for sharing the script. This is very much appreciated.
Get-GPOReport will only show applied policy settings. I would like to have all policies around 3000+ (including applied and not applied) to be displayed. Is it possible?
Thank you in advance.
Thank you for sharing the script. This is very much appreciated.
Get-GPOReport will only show applied policy settings. I would like to have all policies around 3000+ (including applied and not applied) to be displayed. Is it possible?
Thank you in advance.
AaronMargosis_Tanium
Jun 28, 2023Iron Contributor
Policy Analyzer analyzes GPO backups, so a setting needs to be configured in one or more GPOs for it to show in a comparison.
- jemfernandezJun 28, 2023Copper ContributorThank you AaronMargosis_Tanium. I agree but I would like to display all without configuring each setting. I am hoping there's a way either Policy Analyzer or other tools like PowerShell.
- AaronMargosis_TaniumJun 28, 2023Iron ContributorWhat you need to do is to merge the Policy Analyzer results (each .PolicyRules file is just an XML document) with a full listing of all available GPO settings. I don't know of any publicly available tools to get all those in an XML, but perhaps you could do something with the Excel spreadsheet that ships with the baselines that lists all the settings.
- LeonPavesicJun 28, 2023Silver Contributor
AaronMargosis_Tanium I agree with you.
jemfernandezIt is hard to get want you need with PowerShell.
Policy Analyzer is a powerful tool that provides a comprehensive analysis of Group Policy objects.You can download Policy Analyzer from the Microsoft Download Center (https://www.microsoft.com/en-us/download/details.aspx?id=55319). Once installed, you can use it to compare GPO backups and analyze the policies within them.
Here's how you can use Policy Analyzer to compare GPOs:
- Launch Policy Analyzer.
- Click on "Open" and select the first GPO backup file.
- Click on "Open" again and select the second GPO backup file.
- Policy Analyzer will analyze the GPOs and display a comparison report.
- The report will show all the policies in the GPOs, including applied and not applied settings, and highlight any differences or conflicts between them.
- AaronMargosis_TaniumJun 28, 2023Iron Contributor(That's not how Policy Analyzer works. There's no "Open," for example. The actual mechanism is described in the PDF that comes with the tool. You should try it out! It's pretty darn cool! 🙂 )
- jemfernandezJun 28, 2023Copper ContributorThank you LeonPavesic. I have tried Policy Analyzer but my goal is not showing.