GPO Compare

Question

question

VINOD-6563 asked May 19, '21 yannara answered May 25, '21

GPO Compare

Is there a way we can compare 2 user policy GPO ? So we have a weird behavior. When a specific user logs in everything works but if the some other user logs on to the same device it does not. Both the user are in same OU. So just scratching my head to find out.

The issue is we have DELL C2422HE monitor connected to Lenovo X1 Carbon Gen 5. when we disconnect: the windows says unrecognized usb device. If I login with a specific user everything works but some other user gives me an error on to the same device. So want to compare and check each and every user based setting to see what’s the difference. Any help is much appreciated. Running windows 10 1909 build

windows-10-general windows-group-policy

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DaisyZhou-MSFT · May 21, 2021 at 05:50 AM

Hello @VINOD-6563,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 ·

DaisyZhou-MSFT · May 24, 2021 at 08:11 AM

Hello @VINOD-6563,
I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 ·

Answer 1 · 2021-05-19T02:22:16.787Z

DSPatrick answered May 19, '21 DSPatrick edited May 19, '21

You can run gpresult/h C:\report.html to generate all group policy result with each user logon, and save them to compare.

--please don't forget to Accept as answer if the reply is helpful--

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2021-05-19T02:30:20.81Z

DaisyZhou-MSFT answered May 19, '21

Hello @VINOD-6563,

Thank you for posting here.

Based on the description above, I understand the users are domain users and windows 10 1909 build is domain joined machine.

We can export user GPO settings as below and compare them.
1.Logon the machine using one domain account (such as user1).
2.Create a new folder in C drive or D drive (such as D:\folder1).
3.Open CMD (do not run as Administrator).
4.Type gpresult /h D:\folder1\GPO1.html and click Enter.

And

1.Logon the machine using one domain account (such as user2).
2.Create a new folder in C drive or D drive (such as D:\folder2).
3.Open CMD (do not run as Administrator).
4.Type gpresult /h D:\folder2\GPO2.html and click Enter.

Open GPO1.html and GPO2.html and compare all the GPO settings under "User Details".

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2021-05-19T02:31:32.11Z

DSPatrick answered May 19, '21

Just checking if there's any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2021-05-19T14:12:55.653Z

VINOD-6563 answered May 19, '21

It was my bad. I know how to take the html report, but my question was how we can compare. We have 100 of settings and its not easy to go over one by one. so was looking if anyone is aware a simple tool or some other way to compare the html output files similar to what we have as Policy Analyzer tool

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2021-05-19T14:22:17.247Z

DSPatrick answered May 19, '21 VINOD-6563 commented May 19, '21

Here you go.
https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049

--please don't forget to Accept as answer if the reply is helpful--

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VINOD-6563 · May 19, 2021 at 04:10 PM

I know these tool. But was asking if there is something similar.

0 ·

Answer 6 · 2021-05-19T16:32:15.087Z

AravinthMathan-3183 answered May 19, '21

Hello, not suggesting on some gpo compare tools. But there also might be possibility that the working user installed an utility or driver for an user (per user installation) and same might be missing for other user who logs in.

Hope this helps
Regards
Aravinth

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 7 · 2021-05-24T13:30:44.927Z

DSPatrick answered May 24, '21

Just checking if there's any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 8 · 2021-05-25T12:30:43.867Z

yannara answered May 25, '21

There was a similar tool out there shipped with MS Security Baseline pack but I believe it is obsole / terminated.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question

GPO Compare

8 Answers

question details

question

GPO Compare

8 Answers

question details

Related Questions