[gptalk] Re: Group Policy Object Comparison

  • From: jfvanmeter@xxxxxxxxxxx
  • To: gptalk@xxxxxxxxxxxxx, <gptalk@xxxxxxxxxxxxx>
  • Date: Mon, 16 Jul 2007 17:53:04 +0000

LOL i'm not that lucky either... I've cobbled a bunch of scripts together to 
backup, dump, list and campare all of my GPs... I'm lucky to get a few 8mm 
tapes to back it off too...

Take Care and Have Fun --John
 -------------- Original message ----------------------
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
> Of course, if you have MS Software Assurance, you can license the full-blown
> version of GPOVault :)
> 
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of jfvanmeter@xxxxxxxxxxx
> Sent: Monday, July 16, 2007 10:44 AM
> To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
> Cc: Nelson, Jamie R Contr 72 CS/SCBAF
> Subject: [gptalk] Re: Group Policy Object Comparison
> 
> Thank You 
> 
> I'm not lucky enough to have a copy of it, I'll have to keep my eyes open
> for copy.
> 
> Take Care and Have Fun --John
> 
>  -------------- Original message ----------------------
> From: "Nelson, Jamie R Contr 72 CS/SCBAF" <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
> > Very nice. However, as Darren stated, this functionality is in the free
> > DesktopStandard GPOVault product. It is not available for download
> > anymore, but if you can get your hands on it, it makes the process very
> > simple. Just a couple clicks and it spits a very nice, color-coded
> > report for you.
> > 
> > Regards,
> > 
> > Jamie Nelson
> > 
> > -----Original Message-----
> > From: jfvanmeter@xxxxxxxxxxx [mailto:jfvanmeter@xxxxxxxxxxx] 
> > Sent: Monday, July 16, 2007 12:18 PM
> > To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
> > Cc: Nelson, Jamie R Contr 72 CS/SCBAF
> > Subject: Re: [gptalk] Re: Group Policy Object Comparison
> > 
> > Here is what I do, there is a script that comes with GPMC
> > GetReportsForAllGPOs.wsf . I call it from the below script, the below
> > script creates a directory by date, then runs GetReportsForAllGPOs.wsf
> > which dumps a report of the GP as a XML and a HTML file. I just run the
> > script as a scheduled task, then another script to call windiff and run
> > it as another scheduled task
> > ------------------------------------------------------------------------
> > ------------------------------------------------------------------------
> > --
> > 'separate the parts of the system date
> >     a = datepart("d",now) 
> >     b = monthname(datepart("m",now),true) 
> >     c = datepart("yyyy",now)
> > 'reassemble them as this to get a filename
> >     d = a&b&c
> > 
> > Dim objFSO, objFolder, strDirectory
> > Dim StrCmdLine, StrDomain, StrReport_Dest, StrDateDir Set objFSO =
> > CreateObject("Scripting.FileSystemObject")
> > Set objFolder = objFSO.CreateFolder("X:\GPOSettings\One\" &d)
> > strComputer = "."
> > Set objWMIService = GetObject("winmgmts:" &
> > "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
> > 
> > StrDateDir= d
> > StrDomain="mydomain.com"
> > StrReport_Dest= objFolder
> > 
> > Set oShell = CreateObject("Wscript.Shell") oShell.CurrentDirectory =
> > "C:\Program Files\GPMC\Scripts\" 
> > StrCmdLine="cscript GetReportsForAllGPOs.wsf " & StrReport_Dest & "
> > /domain:" & StrDomain oShell.Run StrCmdLine
> > ------------------------------------------------------------------------
> > ---------------------------------------------------------------
> > strComputer = "."
> > 'separate the parts of the system date
> >     a = datepart("d",now) 
> >     b = monthname(datepart("m",now),true) 
> >     c = datepart("yyyy",now)
> > 'reassemble them as this to get a filename
> >     d = a&b&c
> > 'set varaibles for yesterday date
> >     od = Day(Date-1)
> >     yd=od&b&c
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > set objFolder =
> > objFSO.CreateFolder("E:\GPOSettings\One\DifferenceReports\" &d) Set
> > objWMIService = GetObject("winmgmts:" &
> > "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2") Set
> > colFiles = objWMIService.ExecQuery("Select * from CIM_DataFile where
> > Extension = 'txt'") Set objYD = objFSO.GetFolder("E:\GPOSettings\x\"
> > &yd) Set objD = objFSO.GetFolder("E:\GPOSettings\x\" &d) Set objFP =
> > objFSO.GetFolder("E:\windiff\") set objDP =
> > objFSO.GetFolder("E:\GPOSettings\x\DifferenceReports\" &d) strFolder =
> > objYD
> > strFolder1 = objD
> > DP=objDP
> > 
> > 
> > Set oShell = CreateObject("Wscript.Shell")
> > oShell.CurrentDirectory = strFolder1 
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > Set objFile = objFSO.GetFile("X Domain Controllers Policy.html")
> > newfile = objFile
> > 
> > Set oShell = CreateObject("Wscript.Shell")
> > oShell.CurrentDirectory = strFolder 
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > Set objFile = objFSO.GetFile("X Domain Controllers Policy.html")
> > oldfile = objFile
> > 
> > oShell.CurrentDirectory = objD
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > objFSO.MoveFile  "X Domain Controllers Policy.html",
> > "XDomainControllersPolicy.html"
> > 
> > oShell.CurrentDirectory = objYD
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > objFSO.MoveFile  "X Domain Controllers Policy.html",
> > "XOneDomainControllersPolicy.html"
> > 
> > Set oShell = CreateObject("Wscript.Shell")
> > oShell.CurrentDirectory = strFolder1 
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > Set objFile = objFSO.GetFile("XDomainControllersPolicy.html")
> > newfile1 = objFile
> > 
> > Set oShell = CreateObject("Wscript.Shell")
> > oShell.CurrentDirectory = strFolder 
> > Set objFSO = CreateObject("Scripting.FileSystemObject")
> > Set objFil1 = objFSO.GetFile("XDomainControllersPolicy.html")
> > oldfile1 = objFile
> > 
> > set objShell = createobject("Wscript.Shell")
> > oShell.CurrentDirectory = objFP
> > StrCmd="E:\windiff\windiff.exe"
> > StrOpt="-Sx  X_DC_Diff.txt"
> > StrCmdLine= StrCmd & " " & StrOpt & " "& oldfile1 & " " & newfile1
> > msgbox StrCmdLine
> > objShell.Run StrCmdLine
> > 
> > its worked ok so far.... --John
> > 
> > 
> > 
> > 
> >  -------------- Original message ----------------------
> > From: "Nelson, Jamie R Contr 72 CS/SCBAF"
> > <Jamie.Nelson.ctr@xxxxxxxxxxxxx>
> > > GPOVault did the trick. Didn't realize it had that functionality in
> > the
> > > free version. Thanks Darren.
> > > 
> > >  
> > > 
> > > Regards,
> > > 
> > > Jamie Nelson
> > > 
> > >  
> > > 
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Darren Mar-Elia
> > > Sent: Monday, July 16, 2007 9:06 AM
> > > To: gptalk@xxxxxxxxxxxxx
> > > Subject: [gptalk] Re: Group Policy Object Comparison
> > > 
> > >  
> > > 
> > > Well, I don't know about that Bart, but you may be able to get there
> > > with something that my company, SDM Software, is getting ready to
> > > release. Essentially we are releasing a Scripting Toolkit for GP,
> > where
> > > you'll be able to modify GP settings via script (PowerShell
> > primarily).
> > > So, in your scenario, you could write a script to read values from one
> > > GPO and write them into another. 
> > > 
> > >  
> > > 
> > > Darren
> > > 
> > >  
> > > 
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of bart.schillebeeks@xxxxxxxxxx
> > > Sent: Monday, July 16, 2007 6:57 AM
> > > To: gptalk@xxxxxxxxxxxxx
> > > Subject: [gptalk] Re: Group Policy Object Comparison
> > > 
> > >  
> > > 
> > > Hi darren, 
> > > 
> > >  
> > > 
> > > You know what i would really love.
> > > 
> > >  
> > > 
> > >  To be able to cut and paste settings between gpo's from one editor to
> > > another. Reworking gpo's that need to split in two for example is
> > simply
> > > a pain in the but. 
> > > 
> > > Microsoft get to it :-)
> > > 
> > >  
> > > 
> > > Vriendelijke groeten,
> > > Cordialement,
> > > Kind Regards, 
> > > Schillebeeks Bart
> > > Active Directory Security Consultant
> > > Bart.schillebeeks@xxxxxxxxxx
> > > AD Internet Consulting BVBA 
> > > "When once you have tasted flight, you will always walk with your eyes
> > > turned skyward, for there you have been and there you always will be."
> > > Leonardo da Vinci, 1452-1519 
> > > Disclaimer:
> > > Any views expressed in this message are those of the individual
> > sender,
> > > except where the message states otherwise and the sender is authorised
> > > to state them to be the views of any such entity.This Message is in no
> > > way legally binding and has to be viewed as a personal opinion of the
> > > sender. This message reflects in no way the views of FORTIS BANK and
> > its
> > > associates and AD internet Consulting BVBA and its associates. Unless
> > > otherwise stated, any pricing information given in this message is
> > > indicative only, is subject to change and does not constitute an offer
> > > to deal at any price quoted. Any reference to the terms of executed
> > > transactions should be treated as preliminary only and subject to our
> > > formal written confirmation.
> > > 
> > > AD Internet Consulting BVBA, Hezemeer 7, 2430 Eindhout-Laakdal
> > > ON:0470419019 www.adinternet.com mailto:Sales@xxxxxxxxxxxxxx
> > > 
> > >  
> > > 
> > >  
> > > 
> > >  
> > > 
> > > ________________________________
> > > 
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Darren Mar-Elia
> > > Sent: Monday, July 16, 2007 3:53 PM
> > > To: gptalk@xxxxxxxxxxxxx
> > > Subject: [gptalk] Re: Group Policy Object Comparison
> > > 
> > > Jamie-
> > > 
> > > Desktopstandard had this in their free version of GPO Vault but its
> > not
> > > available for free anymore. I've heard this so often that maybe I will
> > > try and write something!
> > > 
> > >  
> > > 
> > > Darren
> > > 
> > >  
> > > 
> > > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF
> > > Sent: Monday, July 16, 2007 6:50 AM
> > > To: gptalk@xxxxxxxxxxxxx
> > > Subject: [gptalk] Group Policy Object Comparison
> > > 
> > >  
> > > 
> > > I think this has been asked before but I searched the archives and
> > > didn't find anything. Is there a tool or process I can use to look at
> > > two different GPOs and show me the differences between the two?
> > > Preferably in a nice little report similar to what GPMC produces?
> > > 
> > >  
> > > 
> > > Any suggestions would be greatly appreciated.
> > > 
> > >  
> > > 
> > > Regards,
> > > 
> > >  
> > > 
> > > Jamie Nelson
> > > 
> > > 
> > 
> > 
> > ***********************
> > You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx 
> > with 'unsubscribe' in the Subject field OR by logging into the
> freelists.org Web 
> > interface. Archives for the list are available at 
> > //www.freelists.org/archives/gptalk/
> > ************************
> 
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at //www.freelists.org/archives/gptalk/
> ************************
> 
> ***********************
> You can unsubscribe from gptalk by sending email to 
> gptalk-request@xxxxxxxxxxxxx 
> with 'unsubscribe' in the Subject field OR by logging into the freelists.org 
> Web 
> interface. Archives for the list are available at 
> //www.freelists.org/archives/gptalk/
> ************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: