May 31 2024 09:02 AM - edited May 31 2024 10:07 AM
There is 1 additional Policy Object in the Active Directory (DOMAIN\System\Policies) that does not have a matching Group Policy Object nor in \\Domain\Sysvol\Domain\Policies
What is the appropriate method to remove the object from the AD? I suspect this object may be an issue creating minor problems on my domain.
Jun 03 2024 01:55 PM - edited Jun 03 2024 01:55 PM
Solutionthi @somaji the best tool on this planet to get GPO issues sorted is GPOZaurr on github.
it will run a report by just invoke-GPOZaurr, then open an interactive HTML report that allow views and fixes. It is super powerful and a perfect swiss army knive.
If this helped you, consider marking this "best response".
Often legacy GPOs are not visible in GPMC because the creator had special permission on the GPO that did not include domain admins (default). Logon as Enterprise Admin could be required to compensate this.
Before doing changes make sure to Backup GPOs via GPMC or GPOzaurr functions. it has a lot stuff to offer.
Jun 03 2024 01:55 PM - edited Jun 03 2024 01:55 PM
Solutionthi @somaji the best tool on this planet to get GPO issues sorted is GPOZaurr on github.
it will run a report by just invoke-GPOZaurr, then open an interactive HTML report that allow views and fixes. It is super powerful and a perfect swiss army knive.
If this helped you, consider marking this "best response".
Often legacy GPOs are not visible in GPMC because the creator had special permission on the GPO that did not include domain admins (default). Logon as Enterprise Admin could be required to compensate this.
Before doing changes make sure to Backup GPOs via GPMC or GPOzaurr functions. it has a lot stuff to offer.