You can have hundreds of Group Policy Objects created in your requirement. But when you need to see a list of all the Group Policy Objects, you don’t have an easier way. The easiest way to use the “DSQuery *” command.
DSQuery * command lets you grab a list of Group Policy Objects from the Active Directory domain. The following command gets the list of Group Policy Objects and their creation time:
- DSQuery * -Filter “(ObjectCategory=GroupPolicyContainer)” –attr DisplayName WhenCreated
As you can see in the above command, it lists all the Group Policy Objects by their display name and the date and time the Group Policy Object was created.
You can also use other attributes of the Group Policy Object with the above command.
For example, using DistinguishedName and WhenChanged attributes show the DN and the modified date for each Group Policy Object.
- DSQuery * -Filter “(ObjectCategory=GroupPolicyContainer)” –attr DistinguishedName WhenChanged
Similar to above, GpcFileSysPath attribute can be used to check the Group Policy Template on the SYSVOL shared folder.
About Nirmal Sharma
Nirmal is a MCSEx3, MCITP and was awarded Microsoft MVP award in Directory Services. He is specialized in Directory Services, Microsoft Clustering, Hyper-V, SQL and Exchange and has been involved in Microsoft Technologies since 1994. In his spare time, he likes to help others and share some of his knowledge by writing tips and articles. Nirmal can be reached at [email protected].
Thank you for this command, exactly what I was looking for
Please advice to pull all the GPO’s with status