Tag Archives: Group Policy

“The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with Those in Active Directory” Message When You Run GPMC

"The Permissions for This GPO in the SYSVOL Folder Are Inconsistent with Those in Active Directory" Message When You Run GPMC.

Advertisements

Troubleshooting File Replication Service – Windows 2003 Server R2

Today I found out – through troubles with GPOs – that 2 servers in a site are not replicating sysvol.

Used gpotool to confirm it’s a FRS issue. I recently copied some GPOs to this domain and GpoTool reported:

This article help me immensely

Troubleshooting File Replication Service.

More on the Group Policy Health Cmdlet – Group Policy Software – SDM Software | Group Policy Management & Administration Tools

More on the Group Policy Health Cmdlet – Group Policy Software – SDM Software | Group Policy Management & Administration Tools.

Group Policy and Logon Impact – Group Policy Team Blog – Site Home – TechNet Blogs

Group Policy and Logon Impact – Group Policy Team Blog – Site Home – TechNet Blogs.

Listing all GPOs in the current forest – Group Policy Team Blog – Site Home – TechNet Blogs

Listing all GPOs in the current forest – Group Policy Team Blog – Site Home – TechNet Blogs.

Listing Disabled GPOs in a Forest – Group Policy Team Blog – Site Home – TechNet Blogs

Listing Disabled GPOs in a Forest – Group Policy Team Blog – Site Home – TechNet Blogs.

Get GPOs linked to an OU

Get the OU first
Microsoft AD module

$dn = Get-ADObject -Filter {name -like "OU name*"} | select -expand distinguishedname

or

Get-ADOrganizationalUnit -Filter {name -eq "OU_Name"} 

or

Get-ADOrganizationalUnit -Identity OU_DistinguishedName 

Quest AD Commandlets

Get-QADObject -Name "Domain Controllers" -Type organizationalUnit

The type parameter makes Get-QADobject search for objects that have one of the objectClass attribute values set to the Type parameter value

Get the GPO links

(Get-GPInheritance -Target $dn).gpolinks

Get GPO Objects

Once we have GPO links we get GPO guids from them and use these to get the GPOs

Get-ADOrganizationalUnit -Filter {name -eq "OU_Name"} | Select-Object -expand distinguishedname | Get-GPInheritance | Select-Object -expand gpolinks | ForEach-Object {get-gpo -Guid $_.gpoid}

or we can use the LinkedGroupPolicyObjects property, find a GPO GUID in there using regex (notice the named group gpoguid, also notice how we access that named group inside the Matchinfo objects returned by Select-String)

Get-ADOrganizationalUnit -Identity "OU=GFŘ,DC=cb,DC=ds,DC=mfcr,DC=cz" | select -ExpandProperty LinkedGroupPolicyObjects | Select-String -Pattern "^cn={(?<gpoguid>.*)}.*" | select -ExpandProperty matches | ForEach-Object {$GpoGuid = $_.Groups["gpoguid"].value;get-gpo -Guid $GpoGuid}
smsagent

Scripts, tools and tips, mostly around Microsoft SCCM and EMS

To The Point

Anything about Technology and Business

Brian's Power Windows Blog

Microsoft in the Enterprise. Windows, Hyper-V, Exchange, SQL, and more!

PowerScripting Podcast

Shownotes and links for the PowerScripting Podcast, a podcast to help people learn Windows Powershell

Learn Powershell | Achieve More

What is this Powershell of which you speak?