Get-GPOVersion.ps1
|
using module ActiveDirectory using module GroupPolicy <#PSScriptInfo .DESCRIPTION This cmdlet will gather the Active Directory and SYSVOL version numbers of every Group Policy Object (GPO) in the domain. This enables you to confirm GPO consistency across Domain Controllers. .VERSION 1.3.0 .GUID a65878f9-d099-47ed-8891-c32bde886f52 .AUTHOR mikejwhat .EXTERNALMODULEDEPENDENCIES ActiveDirectory, GroupPolicy .PROJECTURI https://github.com/mikejwhat/Get-GPOVersion #> function Get-GPOVersion { [CmdletBinding()] param( [Parameter (Mandatory=$true, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true, Position=0, ParameterSetName='ComputerName')] [String[]]$ComputerName, [Parameter (Mandatory=$true, ValueFromPipeline=$true, ParameterSetName='InputObject')] [Microsoft.ActiveDirectory.Management.ADComputer[]]$InputObject ) BEGIN {} PROCESS { if ($InputObject) { $ComputerName = $InputObject.Name } foreach ($c in $ComputerName) { Write-Verbose -Message ("{0} Querying domain controller `'$($c.toupper())`' for GPOs..." -f (Get-Date).TimeOfDay) try { $gpo = Get-GPO -Server $c -All -ErrorAction Stop } catch { Write-Warning "Could not retrieve GPOs from $c" continue } $gCount = 0 foreach ($g in $gpo) { $gCount++ Write-Verbose -Message ("{0} GPO `($($gCount) of $($gpo.count)`) `'$($g.Displayname.toupper())`'" -f (Get-Date).TimeOfDay) [PSCustomObject]@{ DCName = $c GPODisplayName = $g.DisplayName ADUserVer = $g.User.DSVersion SYSVOLUserVer = $g.User.SysvolVersion ADComputerVer = $g.Computer.DSVersion SYSVOLComputerVer = $g.Computer.SysvolVersion GPOId = $g.Id } } # gpos foreach } # computername foreach } # process END {} } # function |