This module provides the functionality needed to manipulate Group Policy.

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

This script allows you to change logon screen and desktop background in Windows 10 Professional using GPO startup script.

Module to manage WMI Filter

This Powershell module provides numerous security-related configurations, providing all-round basic protection.

TrackGpo is a PowerShell module that tracks changes to Group Policy Objects (GPOs) in an Active Directory environment.

This script creates a report of all group policy links, their locations, and their configurations in the current domain, and their replication metadata for auditing and forensics. Output can be piped to a CSV file, Out-Gridview, etc. tl;dr - It shows you where all of your GPOs are linked to the OUs and where blocking or no-override is turned on. I... More info

Script to automatically download latest Admx files for several products. Optionally copies the latest Admx files to a folder of your chosing, for example a Policy Store.

PowerShell module to assist with Group Policy

PSSmb contains commands for getting the status of SMB client and server components, and enabling and disabling the different versions installed on local and remote computers. Due to recent vulnerabilities like EternalBlue that was used by the ransomware WannaCry and the wiper PetyaWrap, it is now recommended to disable both the client and server... More info

Group Policy Comment Extraction and Reporting

When run (ideally on a recurring schedule via Task Scheduler) the script will check Group Policies linked under $watchedOU for changes and perform an automatic backup of new and changed policies. It will also generate individual HTML/XML reports of the policies and save it with the backups with an option to send a summary of changes via e-mail.

PowerShell script to periodically back up the Group Policy and documentation of version using HTML reports. Ideal as a scheduled task to perform regular backups of the GPO. Each backup creates a new subfolder with a time stamp. The script does not require Administrative privileges. If the script runs with Administrative privileges, it will write st... More info

Enable / Disable your GPO users or computers settings You can change SetComputerEnabled or SetUserEnabled

Configuration that will remove the registry policy that disables SMBv1. This will cause the policy to show 'Not Configured' in gpedit.

Configuration that will disabled SMB1.

This script generates Resultant Set of Policy (RSoP) reports across Windows OSs with and without native PowerShell support for such. When the native Get-GPResultantSetOfPolicy is available, that is used to generate an HTML/XML report. When it is not, or the user wishes to output the results to console, the script relies on the older gpresult.exe.... More info

Configuration that will disabled SMB1. The configuration then uses the RefreshRegistryPolicy resource to invoke gpupdate.exe to refresh group policy and enforce the policy that has been recently configured. The corresponding policy in gpedit will not reflect the policy is being enforce until the RefreshRegistryPolicy resource has succesfully ran. ... More info

Create a new GPO for Microsoft Edge 80 or above with WMI-Filter, requirements for all Steps with help of external Modul for create WMI Filter with PowerShell: https://www.powershellgallery.com/packages/GPWmiFilter. That Script is compatible and tested with Windows 10 1809 or above and PowerShell 5.1 or 7.0.3 Specifies PowerShell modules that the sc... More info

This module read the content of ADMX and ADML files. It instantiate object with GPOTools* classes. You can search a policy parameter with PowerShell functions and find the registry key.