Gets controlled GPOs for a domain.


   [-Domain <String>]


The Get-ControlledGpo cmdlet gets the controlled Group Policy Objects (GPOs) from an Advanced Group Policy Management (AGPM) archive for a domain. You can use this cmdlet to view state information for controlled GPOs. Use the Get-Gpo cmdlet to view uncontrolled GPOs. For more information, type Get-Help Get-Gpo.


Example 1: Get all GPOs and then filter results

PS C:\>Get-ControlledGpo -Domain "" | Where {$ -eq "TSQA Group policies"}
Name            : TSQA Group policies
ID              : {5507363B-6AEB-4EFF-89FD-1567CD1E14E5}
CheckoutID      : 
BackupID        : {70D90CA2-E396-4549-A2C9-18EED518F6F1}
State           : CHECKED_IN
ComputerVersion : 2
UserVersion     : 2
Deployed        : 11/25/2014 9:54:11 AM
Changed         : 11/25/2014 9:54:12 AM
ChangedBy       : CONTOSO\Admin07
WmiFilterName   : 
Comment         :

This command gets all controlled GPOs from the domain, and then passes them to the Where-Object cmdlet. That cmdlet returns the GPO from those results named TSQA Group policies.

Optional Parameters


Specifies the fully qualified domain name (FQDN) of a domain. This cmdlet gets GPOs in the domain that this parameter specifies. If the AGPM service runs as part of a different domain, and if this cmdlet specifies that domain, a trust relationship must exist between that domain and the domain of the current user or computer.

If you do not specify a domain, this cmdlet uses the domain of the current user.

If you use this cmdlet as part of a computer startup or shutdown script, and if the command does not specify this parameter, the cmdlet uses the domain of the computer.

Default value:None
Accept pipeline input:False
Accept wildcard characters:False





This cmdlet returns controlled GPO objects.