How to find the redundant/conflicts group policy applied to domain level and OU level.

Amit Kumar Singh 121 Reputation points
2021-03-03T17:33:22.247+00:00

Hi, I am performing GPO clean-up and also trying to streamline the group policy in the environment by checking the conflicts of group policy and also checking the redundant group policy applied in the environment. This is generally requires an audition procedure for the group policy.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,747 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,127 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,854 questions
0 comments
Accepted answer
  1. Fan Fan 15,291 Reputation points Microsoft Vendor
    2021-03-04T01:29:24.713+00:00

    Hi,

    Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). It can highlight when a set of Group Policies has redundant settings or internal inconsistencies, and can highlight the differences between versions or sets of Group Policies. It can also compare GPOs against current local policy settings and against local registry settings. And you can export its findings to a Microsoft Excel spreadsheet.

    More information for your reference:
    https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049

    Best Regards,

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Amit Kumar Singh 121 Reputation points
    2021-03-04T10:32:29.557+00:00

    Hello FanFan,

    Hope this is secure to run in my environment and it is just reading the data and exporting it to excel without making any changes in my current group policy configuration.

    I am seeing a lot of downloads to download which one should I go for.

  2. DonPick 1,256 Reputation points
    2021-03-04T10:44:12.4+00:00

    SCT contains several tools including PolicyAnalyzer, and many baselines

    https://learn.microsoft.com/en-au/windows/security/threat-protection/security-compliance-toolkit-10