question

Amitkumarsingh avatar image
0 Votes"
Amitkumarsingh asked ·

How to find the redundant/conflicts group policy applied to domain level and OU level.

Hi, I am performing GPO clean-up and also trying to streamline the group policy in the environment by checking the conflicts of group policy and also checking the redundant group policy applied in the environment. This is generally requires an audition procedure for the group policy.

windows-serverwindows-active-directorywindows-group-policy
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered ·

Hi,

Policy Analyzer is a utility for analyzing and comparing sets of Group Policy Objects (GPOs). It can highlight when a set of Group Policies has redundant settings or internal inconsistencies, and can highlight the differences between versions or sets of Group Policies. It can also compare GPOs against current local policy settings and against local registry settings. And you can export its findings to a Microsoft Excel spreadsheet.

More information for your reference:
https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049

Best Regards,

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
74693-356.jpg



0 Votes 0 ·
356.jpg (113.6 KiB)
Amitkumarsingh avatar image
0 Votes"
Amitkumarsingh answered ·

Hello FanFan,

Hope this is secure to run in my environment and it is just reading the data and exporting it to excel without making any changes in my current group policy configuration.

I am seeing a lot of downloads to download which one should I go for.



· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

please find the attached image which is showing for download.

Microsoft Security Compliance Toolkit 1.0


0 Votes 0 ·
cheong00 avatar image cheong00 Amitkumarsingh ·

Fixing comment to convert image link to download link, and amend tag to show what the download is for.

1 Vote 1 ·
DonPickard-7259 avatar image
0 Votes"
DonPickard-7259 answered ·

SCT contains several tools including PolicyAnalyzer, and many baselines

https://docs.microsoft.com/en-au/windows/security/threat-protection/security-compliance-toolkit-10


· 3 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @DonPickard-7259

Is this safe to run in my production environment? Thanks

0 Votes 0 ·

Hi @Amitkumarsingh yes it's safe, I use it all the time.

I use GPMC to create GPO exports/backups, to files/folders, and then I import those exports/backups into PolicyAnalyzer.

1 Vote 1 ·

Thank you

0 Votes 0 ·