Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

How to Get GPO Reports Using Powershell and ADAudit Plus

Group Policy serves as a backbone to Active Directory infrastructure, ensuring that right configurations are applied to all the objects linked to it. Real-time monitoring of Group Policy objects enable IT administrators to audit changes and ensure IT security settings are intact.

The following is a comparison between the procedures of obtaining GPO reports with Windows PowerShell and ADAudit Plus:

PowerShell

Steps to obtain GPO reports using PowerShell:

  • Select the domain from which you want to retrieve the report.
  • Identify the group policy object for which the reported needs to be fetched.
  • Compile the script.
  • Execute it in Windows PowerShell.
  • The report will be exported in the format specified.
  • To obtain the report in a different format, modify the script accordingly.

Sample Windows PowerShell script

The following cmdlet generates GPO report for the specified GPO in HTML format.

Get-GPOReport -Name "Name of the GPO" -ReportType HTML -Path "Mention the location where report needs to be saved, For Eg: C:\GPOReports\Report1.html"

To get reports for all the group policy objects in a domain, use the following cmdlet

Get-GPOReport -All -Domain "Name of the domain" -Server "DC1" -ReportType HTML -Path "Mention the location where report needs to be saved, For Eg: C:\GPOReports\AllReports.html"

In order to save the reports in xml format, replace HTML with XML in the above cmdlets.

ADAudit Plus

To obtain the report,

  • Navigate to Reports -> GPO Changes -> GPO Setting Changes -> Group Policy Security Settings Changes.
    Note: Under the GPO Changes tab, all the reports related to GPO changes and management can be found.
  • Select the required 'Domain' from the drop down option on the top right corner.
  • Select 'Export as' to export the report in any of the preferred formats (CSV, PDF, HTML, and XLS).
powershell-get-gpo-reports-1

Following are the limitations to obtain GPO reports using native tools like Windows PowerShell:

  • We can run this script only from the computers which have Active Directory Domain Services role.
  • In order to export the report in different formats, the script needs to be modified each time.
  • Applying more filters will increase the LDAP query complexity.
  • Comprehending GPO reports to identify critical changes in group policy objects can be cumbersome.

ADAudit Plus will automatically scan the domains to retrieve information about the all the group policy objects, generate the report and present it in a simple and intuitively designed UI.

  • Avoid complex PowerShell-scripting, and simplify AD change auditing with ADAudit Plus.
  •  
  • By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.
  •  
  • Thanks!
  • Your download is in progress and it will be completed in just a few seconds! If you face any issues, download manually here.

Related Resources

ADAudit Plus Trusted By