[gptalk] Re: Get-SDMgpo only returning 3/4
- From: "Kevin Gay" <kevin.gay@xxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Wed, 25 Jun 2008 13:40:50 -0500
It doesn't, the Select command may output to the screen correctly but
apparently returns either an object or a formatted string of
@DisplayName=Default Domain Policy, that @DisplayName= kills the backup
cause it's an invalid name, never would've figured that out if I had
been generating folders on the fly for new GPO's using their display
name.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Wednesday, June 25, 2008 1:27 PM
To: 'Darren Mar-Elia'; gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Get-SDMgpo only returning 3/4
And of course after I sent that, I realized I was testing with the new
version of my cmdlets. So, this should work in the current version:
$gpos = Get-SDMgpo * | select DisplayName
From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx]
Sent: Wednesday, June 25, 2008 10:56 AM
To: 'gptalk@xxxxxxxxxxxxx'
Subject: RE: [gptalk] Re: Get-SDMgpo only returning 3/4
Kevin-
One thing you can do to make your script simpler is to the following:
$gpos = Get-SDMgpo * | select Name
What that will do is store only the names of the GPOs in the $gpos
variable, which gets rid a lot of your grepping and string parsing.
Let me know if that doesn't work. Also, one thing I should have in the
next version of the cmdlets is the ability to pipe output of Get-SDMGPO
into other cmdlets. Today that does not work because the current output
of that cmdlet is the native GPMC object, which is not pipe-able. I
should have a version out soon that will let you do something like this:
Get-SDMGPO * | Export-SDMGPO -location c:\backups
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Kevin Gay
Sent: Wednesday, June 25, 2008 9:58 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Get-SDMgpo only returning 3/4
Domain Admin, and just double checked it, have full control over a GPO I
know isn't listed..... grr. I was running powershell under my regular
account while simultaneously running active directory under my admin
account, can't believe I didn't notice that. Thanks.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Cruz, Jerome L
Sent: Wednesday, June 25, 2008 11:41 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Get-SDMgpo only returning 3/4
Hi Kevin,
Several possibilities (off the top of my head...not even looking at the
code yet):
1) The account used to run the script does not have access to all
of the GPOs.
2) Something wrong with "spaces" in the display names of the GPOs
(causing them to be the same name...data overwriting)
3) [low probability] Many GPOs have the same name (e.g. New Group
Policy Object).
Jerry Cruz | Group Policies Product Manager | Boeing IT
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Kevin Gay
Sent: Wednesday, June 25, 2008 8:46 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Get-SDMgpo only returning 3/4
I'm using Powershell to create backups of all our GPO's, basically a
daily script that runs and drops them into a folder with the GPO's name
as the folder name. I've attached links and the script at the bottom if
anyone would like to use it. But the real problem is that Get-SDMgpo
only retrieves about 3/4 of all the GPOs in the domain, we have 61
GPO's, running Get-SDMgpo * (which grabs them all) only returns 48. So
I'm wondering if anyone else has had this problem and if they resolved
it. I'm also using the free download of the cmdlets.
http://www.gpoguy.com/powershell.htm - explanation of the cmdlets and
download location. You'll need to see the howto so you can add the
cmdlets to powershell.
http://gnuwin32.sourceforge.net/packages/grep.htm - for grep used in the
script, I just placed the files in system32.
Script:
#Add-PSSnapin SDMSoftware.PowerShell.GPMC #uncomment in case you get an
error saying Get-SDMgpo is not understood.
$gpmList = Get-SDMgpo * | grep "DisplayName"
$strSavePath = \\server\share"
# the log doesn't seem to work as well as I expected it to.
$Date = Get-Date -format MM-dd-yyyy
$Logs = \\server\share\Logs\" + $Date + ".txt"
foreach ($gpmGPOName in $gpmList)
{
# Essentially this is performing an InStr() and then a
Right()
# so it can grab only the GPO name.
$Index = $gpmGPOName.indexof(":") + 2
$Length = $gpmGPOName.length - $Index
# See if it outputs correctly
# echo $gpmGPOName.substring($Index, $Length)
$gpmName = $gpmGPOName.substring($Index, $Length)
echo $gpmName
# put together the full path
$strLocation = $strSavePath + "\" + $gpmName
# Check for folder to put GPO in
if (!(Test-Path $strLocation))
{
md $strLocation
}
# Log some info.
echo $gpmName >> $Logs
echo $gpmName
Export-SDMgpo -Name $gpmName -location $strLocation
-Description $gpmName >> $Logs
}
Thanks,
Kevin Gay
Desktop Administrator
Cherokee Nation Enterprises
918-384-6998
Catoosa, OK 74015
Other related posts:
