Skip to content

Commit d5ecad9

Browse files
auk0x01martinsohn
andauthored
New Query - All GPOs applied to a specific computer.yml (#33)
* Create All GPOs applied to a specific computer.yml * Update All GPOs applied to a specific computer.yml - Replace 'Base' with ':Base' - Reverse path and return p - Add accuracy disclaimer * Update All GPOs applied to a specific computer.yml --------- Co-authored-by: Martin Sohn Christensen <[email protected]>
1 parent 95d93c2 commit d5ecad9

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed
Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
name: All GPOs applied to a specific Computer
2+
guid: 1d75a21e-0d34-40c5-9360-281b60737d87
3+
prebuilt: false
4+
platform: Active Directory
5+
category: Domain Information
6+
description: View all GPOs that are applied to any specific computer. This query identifies GPOs that are applied at both the Domain Level and the OU level, saving time in large Active Directory environments where GPO inheritance is complex. Replace "COMPUTER_NAME" with the target computer name or a substring. Note this does not take OU 'Block inheritance' and GPO 'No Override' into account.
7+
query: |-
8+
// Replace "HOSTNAME/FQDN" with the computer's
9+
MATCH p=(c:Computer)<-[:Contains*..]-(:Base)<-[:GPLink]-(:GPO)
10+
WHERE toLower(c.name) CONTAINS toLower("HOSTNAME/FQDN")
11+
RETURN p
12+
revision: 1
13+
resources:
14+
- https://learn.microsoft.com/en-us/previous-versions/windows/desktop/Policy/overriding-and-blocking-group-policy
15+
acknowledgements: Adnan Ullah Khan, @auk0x01

0 commit comments

Comments
 (0)