[gptalk] Re: Check if GPO is applied on a workstation
- From: "Nelson, Jamie R Contr 72 CS/SCBNF" <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Thu, 8 Mar 2007 14:45:18 -0600
You would need to edit the wmiqueries.xml file that GPInventory uses and
add your own custom query. To query for the application of a specific
GPO you would add something similar to the following (making sure you
replace the GUIDName value with that of the GPO you are checking for):
<ManagedObject Name="Version of GPO computer settings applied"
Query="select version from RSOP_GPO where accessDenied='false' and
enabled='true' and filterAllowed='true' and not version='0' and
GUIDName='{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}'" Root="ComputerRSOP"
/>
Remember that Computer/User RSOP is separate, so if your GPO has both
user and computer settings you would need to check for both. I haven't
tested this myself, but it should return the version applied and if the
version is Null (blank) then the GPO hasn't been applied to that system.
Regards,
//signed//
Jamie R Nelson
Systems Engineer
Ingenium Corporation
72 CS/SCBNF
405.739.2811 (DSN 339)
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of hboogz
Sent: Thursday, March 08, 2007 12:57 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Check if GPO is applied on a workstation
does anyone have a sample wmi query i can use in gpinventory to find out
if a gpo was applied ?
i'm an absolute n00b when it comes to wmi.
Thanks,
On 3/8/07, Dev Null <thyrymn@xxxxxxxxxxx> wrote:
Right, but what I need is a way to check a file or a registry key in an
automated manner remotely as part overall policy and compliance check.
>From: pierre.camilleri@xxxxxxxxxxxxxxx
>Reply-To: gptalk@xxxxxxxxxxxxx
>To: gptalk@xxxxxxxxxxxxx
>Subject: [gptalk] Re: Check if GPO is applied on a workstation
>Date: Thu, 8 Mar 2007 16:07:14 +0100
>
>Do you have the Group Policy Management Console installed? It is where
the
>Group Policy/ies were created. You now have Group Policy Results. Right
>click on it and select Group Policy Results Wizard. Select the
workstation
>you want to query and you should get what you're asking for.
>
>Pierre
>
>
>
>
>"Dev Null" <thyrymn@xxxxxxxxxxx>
>Sent by: gptalk-bounce@xxxxxxxxxxxxx
>08/03/2007 16:00
>Please respond to
>gptalk@xxxxxxxxxxxxx
>
>
>To
>gptalk@xxxxxxxxxxxxx
>cc
>
>Subject
>[gptalk] Re: Check if GPO is applied on a workstation
>
>
>
>
>
>
>How exactly would this work since I can only read a file or a registry
>key?
>
>
> >From: pierre.camilleri@xxxxxxxxxxxxxxx
> >Reply-To: gptalk@xxxxxxxxxxxxx
> >To: gptalk@xxxxxxxxxxxxx
> >Subject: [gptalk] Re: Check if GPO is applied on a workstation
> >Date: Thu, 8 Mar 2007 15:52:27 +0100
> >
> >Use Group Policy Results from the Group Policy Management Console.
> >
> >Regards
> >Pierre
> >
> >
> >
> >
> >"Dev Null" < thyrymn@xxxxxxxxxxx>
> >Sent by: gptalk-bounce@xxxxxxxxxxxxx
> >08/03/2007 15:49
> >Please respond to
> >gptalk@xxxxxxxxxxxxx
> >
> >
> >To
> >gptalk@xxxxxxxxxxxxx
> >cc
> >
> >Subject
> >[gptalk] Check if GPO is applied on a workstation
> >
> >
> >
> >
> >
> >
> >Hello.
> >
> >I have a situation where I need to regularly check the status of GPO
on
> >4,000 some workstations. I have a "compliance checker" product that
can
> >read files and registry keys (but not the event log) out of the box.
> >
> >Is there a place where I can look to see the following information:
> >
> >1. Which GPO is currently applied to the workstation
> >and
> >2. When it was last applied?
> >
> >Thanks,
> >Thy
> >
> >_________________________________________________________________
> >The average US Credit Score is 675. The cost to see yours: $0 by
>Experian.
> >
>
>http://www.freecreditreport.com/pm/default.aspx?sc=660600&bcd=EMAILFOOT
ERAVERAGE
> >
> >
> >***********************
> >You can unsubscribe from gptalk by sending email to
> >gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field
OR
>by
> >logging into the freelists.org Web interface. Archives for the list
are
> >available at //www.freelists.org/archives/gptalk/
> >************************
> >
>
>_________________________________________________________________
>Mortgage rates as low as 4.625% - Refinance $150,000 loan for $579 a
>month.
>Intro*Terms
>https://www2.nextag.com/goto.jsp?product=100000035&url=%2fst.jsp&tm=y&s
earch=mortgage_text_links_88_h27f6&disc=y&vers=743&s=4056&p=5117
>
>
>***********************
>You can unsubscribe from gptalk by sending email to
>gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
>logging into the freelists.org Web interface. Archives for the list are
>available at //www.freelists.org/archives/gptalk/
>************************
>
_________________________________________________________________
The average US Credit Score is 675. The cost to see yours: $0 by
Experian.
http://www.freecreditreport.com/pm/default.aspx?sc=660600&bcd=EMAILFOOTE
RAVERAGE
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
