SOLVED

Policy Analyzer Command Line or any way to automate Policy Analyzer?

%3CLINGO-SUB%20id%3D%22lingo-sub-712471%22%20slang%3D%22en-US%22%3EPolicy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-712471%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20looking%20for%20a%20way%20to%20scan%20systems%20against%20a%20backup%20GPO%20in%20an%20automated%20fashion.%20The%20Policy%20Analyzer%20works%20great%2C%20but%20there%20doesn't%20seem%20to%20be%20a%20way%20to%20run%20it%20in%20an%20automated%20fashion.%20Are%20there%20any%20plans%20to%20offer%20this%20functionality%3F%20Or%20am%20I%20unaware%20of%20another%20tool%20or%20technique%20I%20should%20be%20using%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-721296%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-721296%22%20slang%3D%22en-US%22%3ETake%20a%20look%20at%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsdmsoftware.com%2Fcategory%2Fgroup-policy-blog%2Fgpo-compare%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsdmsoftware.com%2Fcategory%2Fgroup-policy-blog%2Fgpo-compare%2F%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3ERegards%3CBR%20%2F%3EAlex%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-725680%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-725680%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364207%22%20target%3D%22_blank%22%3E%40DavidBloom%3C%2FA%3E%3C%2FP%3E%3CP%3EWas%20looking%20for%20this%20as%20well!%20In%20the%20comment%20section%20of%20this%20article%2C%20Aaron%20Margosis%20mentions%20how%20the%20import%20process%20(where%20the%20.PolicyRules%20file%20is%20created)%20can%20be%20used%20with%20Powershell%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fsecguide%2F2016%2F01%2F22%2Fnew-tool-policy-analyzer%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fsecguide%2F2016%2F01%2F22%2Fnew-tool-policy-analyzer%2F%3C%2FA%3E%3C%2FP%3E%3CP%3EHowever%2C%20I%20couldn't%20find%20anything%20on%20how%20to%20compare%20the%20.PolicyRules%20files%20together.%20Would%20love%20to%20get%20an%20update%20on%20this%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F171536%22%20target%3D%22_blank%22%3E%40Aaron%20Margosis%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-823084%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-823084%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F364207%22%20target%3D%22_blank%22%3E%40DavidBloom%3C%2FA%3Eand%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F367858%22%20target%3D%22_blank%22%3E%40000Kyoto%3C%2FA%3Esorry%20for%20the%20delay.%26nbsp%3B%20Aaron%20is%20working%20on%20something%20to%20cover%20this%20gap%20and%20should%20have%20something%20in%20preview%20form%20to%20share%20in%20the%20coming%20months.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1297526%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1297526%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F272514%22%20target%3D%22_blank%22%3E%40Rick_Munck%3C%2FA%3E%20any%20update%20on%20this%20please%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1297947%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Analyzer%20Command%20Line%20or%20any%20way%20to%20automate%20Policy%20Analyzer%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1297947%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F129396%22%20target%3D%22_blank%22%3E%40David%20Caddick%3C%2FA%3E%26nbsp%3Bnothing%20yet%2C%20still%20trying%20to%20figure%20out%20the%20best%20way%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

We are looking for a way to scan systems against a backup GPO in an automated fashion. The Policy Analyzer works great, but there doesn't seem to be a way to run it in an automated fashion. Are there any plans to offer this functionality? Or am I unaware of another tool or technique I should be using?

 

Thank you.

5 Replies
Highlighted

@DavidBloom

Was looking for this as well! In the comment section of this article, Aaron Margosis mentions how the import process (where the .PolicyRules file is created) can be used with Powershell:

  https://blogs.technet.microsoft.com/secguide/2016/01/22/new-tool-policy-analyzer/

However, I couldn't find anything on how to compare the .PolicyRules files together. Would love to get an update on this @Aaron Margosis 

 

 

 

Highlighted
Best Response confirmed by Deleted
Solution

@DavidBloom and @000Kyoto sorry for the delay.  Aaron is working on something to cover this gap and should have something in preview form to share in the coming months.

Highlighted

Hi @Rick_Munck any update on this please?

 

Thanks 

Highlighted

@David Caddick nothing yet, still trying to figure out the best way