Tagged: ADMX versions
March 21, 2017 at 1:39 am #13887
Say one has a GPO with certain settings. What I would like to have is a sort of report that shows per GPO which ADMX is being used for the settings that have been configured in that GPO.
The reason I want this information is what I have read here: https://blogs.technet.microsoft.com/grouppolicy/2016/10/12/admx-version-history/
When I know which GPO is using which ADMX I can find out if I should check my configured settings before/after introducing new ADMX files with the help of the Excel workbook here: https://go.microsoft.com/fwlink/?linkid=829685March 23, 2017 at 6:29 am #13888
I think the only easy way to do that is to use the spreadsheet you’ve referenced above, which contains a list of settings and which ADMX they are a part of. You could write some powershell that takes that spreadsheet as input and meshes it against the underlying Administrative Template settings in a given GPO, using the PowerShell Group Policy Module’s Get-GPRegistryValue. It’s not a trivial exercise, but it could be done. However, I’m not sure it’s worth the effort. I think that blog post you’ve linked to sort of overstates the problem of settings getting orphaned as ADMX files change. This is definitely the exception rather than the rule, so I’m not sure it buys you much to know each and every setting’s origin ADMX.
You must be logged in to reply to this topic.
- Group Policy Storage Whitepaper Updated!
- Elevating AD Domain Access With Write Access on the Domain NC Head
- Performing a Denial of Service on AD–How Hard Is it Really?
- Protecting Active Directory–Making AD and Group Policy Less “Visible” to Attackers
- How To Think About Windows Group Policy–An Infrastructure Architect’s Take