#DEFAULT FOLDER VIEW GPO HOW TO#
#DEFAULT FOLDER VIEW GPO DOWNLOAD#

To find where each GPO option is configured, click the row in the table, and the Policy Path in the bottom detail window shows the path to the GPO option. Gray cells indicate that setting isn't configured in that policy, while yellow cells indicate values that conflict between the GPOs that are being compared. You'll get a pop up with all the defined settings and what they are set to in each of the GPOs you are comparing. In the main Policy Analyzer window, select the GPOs you want to compare, and click the 'View / Compare' button. With everything prepared, we can now actually compare 2 or more GPOs. Repeat steps 1-7 for each GPO that you backed up previously.Save the policy rule definition file to the default folder, giving it a meaningful name.The importer tool will show the different types of settings detected.Browse to and select the folder where you saved the backup.In the popup, click File, then 'Add Files from GPO(s)…'.In Policy Analyzer, click the 'Add…' button.This process reads the GPO backup you created and creates a policy definition file that the tool can use. Note that the GUID folder is created automatically by the backup, but the friendly folders (STIG 2012 R2 DC and Member Server) were created manually:īefore you can compare the GPOs, they must be imported into the Policy Analyzer tool. Repeat steps 2-5 for each GPO you want to compare, ensuring you create a separate folder to store each GPO backup like in the structure below.Ensure the folder you select doesn't contain any other GPO backups, or the Policy Analyzer may have trouble importing them. Right click the first GPO and select 'Back up…'.Expand the OUs or Group Policy Objects container to find the GPOs you want to compare.Open the Group Policy Management Console.To compare GPOs, we must first back them up to a folder on the local server. From there, unzip the file and run PolicyAnalyzer.exe It can either be a DC or a member server with the Group Policy console installed.

Once that's downloaded, copy it up to a server in the environment you are working on.

#DEFAULT FOLDER VIEW GPO DOWNLOAD#

On the download page, you can opt to only download 'PolicyAnalyzer.zip' which is the only file we need. This download points to the Microsoft Security Compliance Toolkit, which Policy Analyzer is a part of.

To get started, download the Policy Analyzer tool from Microsoft at.

#DEFAULT FOLDER VIEW GPO HOW TO#

Here, we'll walk through how to get started and interpret the results. It's a little clunky to use for quick troubleshooting, but for in-depth GPO work, this is a great tool for helping review and organize GPOs. Policy Analyzer is a tool released a couple of years ago that allows an administrator to easily compare two or more GPOs to find the differences between them.

Default Folder View gpo