Enumerating GPOs

PowerView

Get list of GPOs of current domain

Get-NetGPO

Get list of GPOs of another domain

Get-NetGPO -Domain <DOMAIN NAME>

Get list of GPO names of current domain

Get-NetGPO | Select displayname

Get list of GPO names of another domain

Get-NetGPO -Domain <DOMAIN NAME> | Select displayname

Get GPO applied on a specific OU with gplink

(Get-NetOU <OU NAME> -FullData).gplink.split(";")[0] -replace "^." | %{Get-NetGPO -ADSpath $_ }

Get resultant set of GPO policies

gpresult /R

Get GPOs which use restricted groups or groups.xml for interesting users

Get-NetGPOGroup

Get users which are in a local group of a machine using GPO

Find-GPOComputerAdmin -Computername <COMPUTER NAME>

Get machines where the given user is member of a specific group

Find-GPOLocation -Username <USERNAME> 

Get GPO applied on an OU

Get-NetGPO -GPOName "{Gplink of OU}"

Active Directory Module

Get list of GPOs of current domain

Get-GPO -All

Get resultant set of GPOs of current domain

Get-GPResultantSetOfPolicy -ReportType HTML -Path <PATH TO REPORT>

Get GPO applied on an OU

Get-GPO -Guid <Gplink of OU>

Last updated