Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

How to get GPO links using PowerShell?

A Group Policy Object allows the administrators to set permissions and manage access control from a central point and hence reduces their burden. Unauthorized changes to a Group Policy Object can result in malicious users accessing confidential information. Therefore, it is necessary to monitor group policy changes in real time to keep any organization safe and secure.

This article compares the method of getting GPO reports using Windows PowerShell and ManageEngine ADAudit Plus, a real-time Active Directory auditing solution.

Windows PowerShell

Steps to get GPO Reports using PowerShell:

  • The Get-GPOReport cmdlet retrieves a report describing the properties and policy settings for a specific Group Policy Object (GPO) or for all GPOs in a domain.
  • GPO Reports contain details, links, security filtering, Windows Management Instrumentation (WMI) filtering, delegation, and computer and user configurations If a file is added through the Path parameter, the report is written to a file; otherwise, it is printed to the display.
    PS C:\> Get-GPOReport -All -Domain "sales.smb.com" -Server "DC1" -ReportType XML -Path "C:\GPOReports\GPOReportsAll.xml"
  • GPO Reports contain details, links, security filtering, Windows Management Instrumentation (WMI) filtering, delegation, and computer and user configurations If a file is added through the Path parameter, the report is written to a file; otherwise, it is printed to the display.
    Get-GPOReport -Name "SampleGPO1" -ReportType HTML -Path "C:\GPOReports\GPOReport1.html"
    Get-GPOReport -GUID 645748ed7-c6b3-6h03-0991-481gbd9772nd-ReportType XML
  • An output for this particular cmdlet can be generated in either XML or HTML format.

ADAudit Plus

To obtain the report,

  • Log in to the ADAudit Plus Web console.
  • Click on the Reports Tab > GPO Management.
  • Select the Domain from the drop down.
  • ADAudit Plus provides out-of-the box reports for all the changes made to a Group Policy object like creation, deletion, modification and GPO link changes.
  • Recently created GPOs - lists all Group Policy Objects created within a given span of time. Change information like who created the GPO, the time it was created, From where was the GPO created.
  • Recently deleted GPOs - lists all Group Policy Objects deleted within a given span of time for a selected domain.
  • Recently modified GPOs - lists all Group Policy Objects modified. Change information like who modified the GPO, the time it was modified, From where was the modification done.
  • GPO Link Changes - Provides the list of GPOs that are linked to OUs in the domain.
  • GPO History - lists the detailed history of changes that have occurred on any selected Group Policy Object.
  • Select Export As to export the report in any of the preferred formats (CSV, PDF, HTML, CSVDE and XLSX).
powershell-get-gpo-links-1

Why ADAudit Plus is the better solution for you?

  • Comprehensive dashboard so you can compare and correlate reports.
  • ADAudit Plus allows you to export reports in the desired format with a single click easily.
  • The PowerShell cmdlet might get overwhelming at times because of the format of the report. ADAudit Plus generates reports in an easy to read format.
  • Multiple filters to help retrieve the necessary information.
  • Avoid complex PowerShell-scripting, and simplify AD change auditing with ADAudit Plus.
  •  
  • By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.
  •  
  • Thanks!
  • Your download is in progress and it will be completed in just a few seconds! If you face any issues, download manually here.

Related Resources

ADAudit Plus Trusted By