[gptalk] Re: Group Policy Object Comparison

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 16 Jul 2007 10:46:32 -0700

Of course, if you have MS Software Assurance, you can license the full-blown
version of GPOVault :)

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of jfvanmeter@xxxxxxxxxxx
Sent: Monday, July 16, 2007 10:44 AM
To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
Cc: Nelson, Jamie R Contr 72 CS/SCBAF
Subject: [gptalk] Re: Group Policy Object Comparison

Thank You 

I'm not lucky enough to have a copy of it, I'll have to keep my eyes open
for copy.

Take Care and Have Fun --John

 -------------- Original message ----------------------
From: "Nelson, Jamie R Contr 72 CS/SCBAF" <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
> Very nice. However, as Darren stated, this functionality is in the free
> DesktopStandard GPOVault product. It is not available for download
> anymore, but if you can get your hands on it, it makes the process very
> simple. Just a couple clicks and it spits a very nice, color-coded
> report for you.
> 
> Regards,
> 
> Jamie Nelson
> 
> -----Original Message-----
> From: jfvanmeter@xxxxxxxxxxx [mailto:jfvanmeter@xxxxxxxxxxx] 
> Sent: Monday, July 16, 2007 12:18 PM
> To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
> Cc: Nelson, Jamie R Contr 72 CS/SCBAF
> Subject: Re: [gptalk] Re: Group Policy Object Comparison
> 
> Here is what I do, there is a script that comes with GPMC
> GetReportsForAllGPOs.wsf . I call it from the below script, the below
> script creates a directory by date, then runs GetReportsForAllGPOs.wsf
> which dumps a report of the GP as a XML and a HTML file. I just run the
> script as a scheduled task, then another script to call windiff and run
> it as another scheduled task
> ------------------------------------------------------------------------
> ------------------------------------------------------------------------
> --
> 'separate the parts of the system date
>       a = datepart("d",now) 
>       b = monthname(datepart("m",now),true) 
>       c = datepart("yyyy",now)
> 'reassemble them as this to get a filename
>       d = a&b&c
> 
> Dim objFSO, objFolder, strDirectory
> Dim StrCmdLine, StrDomain, StrReport_Dest, StrDateDir Set objFSO =
> CreateObject("Scripting.FileSystemObject")
> Set objFolder = objFSO.CreateFolder("X:\GPOSettings\One\" &d)
> strComputer = "."
> Set objWMIService = GetObject("winmgmts:" &
> "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
> 
> StrDateDir= d
> StrDomain="mydomain.com"
> StrReport_Dest= objFolder
> 
> Set oShell = CreateObject("Wscript.Shell") oShell.CurrentDirectory =
> "C:\Program Files\GPMC\Scripts\" 
> StrCmdLine="cscript GetReportsForAllGPOs.wsf " & StrReport_Dest & "
> /domain:" & StrDomain oShell.Run StrCmdLine
> ------------------------------------------------------------------------
> ---------------------------------------------------------------
> strComputer = "."
> 'separate the parts of the system date
>       a = datepart("d",now) 
>       b = monthname(datepart("m",now),true) 
>       c = datepart("yyyy",now)
> 'reassemble them as this to get a filename
>       d = a&b&c
> 'set varaibles for yesterday date
>       od = Day(Date-1)
>       yd=od&b&c
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> set objFolder =
> objFSO.CreateFolder("E:\GPOSettings\One\DifferenceReports\" &d) Set
> objWMIService = GetObject("winmgmts:" &
> "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2") Set
> colFiles = objWMIService.ExecQuery("Select * from CIM_DataFile where
> Extension = 'txt'") Set objYD = objFSO.GetFolder("E:\GPOSettings\x\"
> &yd) Set objD = objFSO.GetFolder("E:\GPOSettings\x\" &d) Set objFP =
> objFSO.GetFolder("E:\windiff\") set objDP =
> objFSO.GetFolder("E:\GPOSettings\x\DifferenceReports\" &d) strFolder =
> objYD
> strFolder1 = objD
> DP=objDP
> 
> 
> Set oShell = CreateObject("Wscript.Shell")
> oShell.CurrentDirectory = strFolder1 
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> Set objFile = objFSO.GetFile("X Domain Controllers Policy.html")
> newfile = objFile
> 
> Set oShell = CreateObject("Wscript.Shell")
> oShell.CurrentDirectory = strFolder 
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> Set objFile = objFSO.GetFile("X Domain Controllers Policy.html")
> oldfile = objFile
> 
> oShell.CurrentDirectory = objD
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> objFSO.MoveFile  "X Domain Controllers Policy.html",
> "XDomainControllersPolicy.html"
> 
> oShell.CurrentDirectory = objYD
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> objFSO.MoveFile  "X Domain Controllers Policy.html",
> "XOneDomainControllersPolicy.html"
> 
> Set oShell = CreateObject("Wscript.Shell")
> oShell.CurrentDirectory = strFolder1 
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> Set objFile = objFSO.GetFile("XDomainControllersPolicy.html")
> newfile1 = objFile
> 
> Set oShell = CreateObject("Wscript.Shell")
> oShell.CurrentDirectory = strFolder 
> Set objFSO = CreateObject("Scripting.FileSystemObject")
> Set objFil1 = objFSO.GetFile("XDomainControllersPolicy.html")
> oldfile1 = objFile
> 
> set objShell = createobject("Wscript.Shell")
> oShell.CurrentDirectory = objFP
> StrCmd="E:\windiff\windiff.exe"
> StrOpt="-Sx  X_DC_Diff.txt"
> StrCmdLine= StrCmd & " " & StrOpt & " "& oldfile1 & " " & newfile1
> msgbox StrCmdLine
> objShell.Run StrCmdLine
> 
> its worked ok so far.... --John
> 
> 
> 
> 
>  -------------- Original message ----------------------
> From: "Nelson, Jamie R Contr 72 CS/SCBAF"
> <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
> > GPOVault did the trick. Didn't realize it had that functionality in
> the
> > free version. Thanks Darren.
> > 
> >  
> > 
> > Regards,
> > 
> > Jamie Nelson
> > 
> >  
> > 
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Darren Mar-Elia
> > Sent: Monday, July 16, 2007 9:06 AM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Re: Group Policy Object Comparison
> > 
> >  
> > 
> > Well, I don't know about that Bart, but you may be able to get there
> > with something that my company, SDM Software, is getting ready to
> > release. Essentially we are releasing a Scripting Toolkit for GP,
> where
> > you'll be able to modify GP settings via script (PowerShell
> primarily).
> > So, in your scenario, you could write a script to read values from one
> > GPO and write them into another. 
> > 
> >  
> > 
> > Darren
> > 
> >  
> > 
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > On Behalf Of bart.schillebeeks@xxxxxxxxxx
> > Sent: Monday, July 16, 2007 6:57 AM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Re: Group Policy Object Comparison
> > 
> >  
> > 
> > Hi darren, 
> > 
> >  
> > 
> > You know what i would really love.
> > 
> >  
> > 
> >  To be able to cut and paste settings between gpo's from one editor to
> > another. Reworking gpo's that need to split in two for example is
> simply
> > a pain in the but. 
> > 
> > Microsoft get to it :-)
> > 
> >  
> > 
> > Vriendelijke groeten,
> > Cordialement,
> > Kind Regards, 
> > Schillebeeks Bart
> > Active Directory Security Consultant
> > Bart.schillebeeks@xxxxxxxxxx
> > AD Internet Consulting BVBA 
> > "When once you have tasted flight, you will always walk with your eyes
> > turned skyward, for there you have been and there you always will be."
> > Leonardo da Vinci, 1452-1519 
> > Disclaimer:
> > Any views expressed in this message are those of the individual
> sender,
> > except where the message states otherwise and the sender is authorised
> > to state them to be the views of any such entity.This Message is in no
> > way legally binding and has to be viewed as a personal opinion of the
> > sender. This message reflects in no way the views of FORTIS BANK and
> its
> > associates and AD internet Consulting BVBA and its associates. Unless
> > otherwise stated, any pricing information given in this message is
> > indicative only, is subject to change and does not constitute an offer
> > to deal at any price quoted. Any reference to the terms of executed
> > transactions should be treated as preliminary only and subject to our
> > formal written confirmation.
> > 
> > AD Internet Consulting BVBA, Hezemeer 7, 2430 Eindhout-Laakdal
> > ON:0470419019 www.adinternet.com mailto:Sales@xxxxxxxxxxxxxx
> > 
> >  
> > 
> >  
> > 
> >  
> > 
> > ________________________________
> > 
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Darren Mar-Elia
> > Sent: Monday, July 16, 2007 3:53 PM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Re: Group Policy Object Comparison
> > 
> > Jamie-
> > 
> > Desktopstandard had this in their free version of GPO Vault but its
> not
> > available for free anymore. I've heard this so often that maybe I will
> > try and write something!
> > 
> >  
> > 
> > Darren
> > 
> >  
> > 
> > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF
> > Sent: Monday, July 16, 2007 6:50 AM
> > To: gptalk@xxxxxxxxxxxxx
> > Subject: [gptalk] Group Policy Object Comparison
> > 
> >  
> > 
> > I think this has been asked before but I searched the archives and
> > didn't find anything. Is there a tool or process I can use to look at
> > two different GPOs and show me the differences between the two?
> > Preferably in a nice little report similar to what GPMC produces?
> > 
> >  
> > 
> > Any suggestions would be greatly appreciated.
> > 
> >  
> > 
> > Regards,
> > 
> >  
> > 
> > Jamie Nelson
> > 
> > 
> 
> 
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx 
> with 'unsubscribe' in the Subject field OR by logging into the
freelists.org Web 
> interface. Archives for the list are available at 
> //www.freelists.org/archives/gptalk/
> ************************

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: