RE: GPO health check

Hi Ahmed. I think you may want to look into GPMC (Group Policy Management Console). This provides a great interface for managing
group policy, and also includes several scripts to set permissions and do other Group Policy management tasks (after installing GPMC,
the scripts will be in the \program files\GPMC\Scripts directory).

The GPMC can be downloaded from http://www.microsoft.com/downloads/...9D60-7E41-4947-
82F5-3330F37ADFEB

--
Jimmy Harper [MSFT]
Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.
--------------------
>From: "Ahmed" <ahmed_al-awah@nexeninc.com>
>Subject: GPO health check
>Date: Tue, 12 Aug 2003 08:25:07 -0600
>Lines: 12
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <#4AnV2NYDHA.384@TK2MSFTNGP12.phx.gbl>
>Newsgroups: microsoft.public.win2000.group_policy
>NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11795
>X-Tomcat-NG: microsoft.public.win2000.group_policy
>
>Hi,
>I'm looking for some scripts that can be used to monitor various GPO
>maintenance related issues on a daily, weekly, and monthly basis (i.e.
>manage permissions, group assignments, user assignments, update procedures,
>GPO impact assessment...etc). Any info is appreciated. Best pracitces will
>do as well.
>
>Thanks!
>
>Ahmed
>
>
>


--
Jimmy Harper [MSFT]
Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.

Hi Jimmy

Thanks for your response. I'm familiar with GPMC but I never knew about the
scripts. Thanks again!

P.S: Do you know of any best practices (checklist) for general GPO
administration? Things that should be monitored closely over a period of
time?

Thanks again!

"Jimmy Harper [MSFT]" <jimmyh@online.microsoft.com> wrote in message
news:$COxjSOYDHA.2000@cpmsftngxa06.phx.gbl...
> Hi Ahmed. I think you may want to look into GPMC (Group Policy Management
Console). This provides a great interface for managing
> group policy, and also includes several scripts to set permissions and do
other Group Policy management tasks (after installing GPMC,
> the scripts will be in the \program files\GPMC\Scripts directory).
>
> The GPMC can be downloaded from
http://www.microsoft.com/downloads/...9D60-7E41-4947-
> 82F5-3330F37ADFEB
>
> --
> Jimmy Harper [MSFT]
> Directory Services
>
> This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms specified
> at http://www.microsoft.com/info/cpyright.htm
>
> Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
> originated.
> --------------------
> >From: "Ahmed" <ahmed_al-awah@nexeninc.com>
> >Subject: GPO health check
> >Date: Tue, 12 Aug 2003 08:25:07 -0600
> >Lines: 12
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
> >Message-ID: <#4AnV2NYDHA.384@TK2MSFTNGP12.phx.gbl>
> >Newsgroups: microsoft.public.win2000.group_policy
> >NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
> >Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
> >Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11795
> >X-Tomcat-NG: microsoft.public.win2000.group_policy
> >
> >Hi,
> >I'm looking for some scripts that can be used to monitor various GPO
> >maintenance related issues on a daily, weekly, and monthly basis (i.e.
> >manage permissions, group assignments, user assignments, update
procedures,
> >GPO impact assessment...etc). Any info is appreciated. Best pracitces
will
> >do as well.
> >
> >Thanks!
> >
> >Ahmed
> >
> >
> >
>
>
> --
> Jimmy Harper [MSFT]
> Directory Services
>
> This posting is provided "AS IS" with no warranties, and confers no
rights. Use of included script samples are subject to the terms specified
> at http://www.microsoft.com/info/cpyright.htm
>
> Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
> originated.
>

Here's a link with a short list of best practices (this is for Windows Server 2003, but most of the stuff here applies to Windows 2000 too):

http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/sag_sp_bestprac.asp

Also, the "Troubleshooting Group Policy in Windows 2000" White Paper provides some great information. There is a Best Practices
section at the end of this doc, but it is very short. You can get this White Paper at
http://www.microsoft.com/windows200...nt/gptshoot.asp.


--
Jimmy Harper [MSFT]
Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.
--------------------
>From: "Ahmed" <ahmed_al-awah@nexeninc.com>
>References: <#4AnV2NYDHA.384@TK2MSFTNGP12.phx.gbl> <$COxjSOYDHA.2000@cpmsftngxa06.phx.gbl>
>Subject: Re: GPO health check
>Date: Tue, 12 Aug 2003 10:17:08 -0600
>Lines: 81
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>Message-ID: <OHuHA1OYDHA.1580@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.win2000.group_policy
>NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11809
>X-Tomcat-NG: microsoft.public.win2000.group_policy
>
>Hi Jimmy
>
>Thanks for your response. I'm familiar with GPMC but I never knew about the
>scripts. Thanks again!
>
>P.S: Do you know of any best practices (checklist) for general GPO
>administration? Things that should be monitored closely over a period of
>time?
>
>Thanks again!
>
>"Jimmy Harper [MSFT]" <jimmyh@online.microsoft.com> wrote in message
>news:$COxjSOYDHA.2000@cpmsftngxa06.phx.gbl...
>> Hi Ahmed. I think you may want to look into GPMC (Group Policy Management
>Console). This provides a great interface for managing
>> group policy, and also includes several scripts to set permissions and do
>other Group Policy management tasks (after installing GPMC,
>> the scripts will be in the \program files\GPMC\Scripts directory).
>>
>> The GPMC can be downloaded from
>http://www.microsoft.com/downloads/...9D60-7E41-4947-
>> 82F5-3330F37ADFEB
>>
>> --
>> Jimmy Harper [MSFT]
>> Directory Services
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>rights. Use of included script samples are subject to the terms specified
>> at http://www.microsoft.com/info/cpyright.htm
>>
>> Note: For the benefit of the community-at-large, all responses to this
>message are best directed to the newsgroup/thread from which they
>> originated.
>> --------------------
>> >From: "Ahmed" <ahmed_al-awah@nexeninc.com>
>> >Subject: GPO health check
>> >Date: Tue, 12 Aug 2003 08:25:07 -0600
>> >Lines: 12
>> >X-Priority: 3
>> >X-MSMail-Priority: Normal
>> >X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
>> >Message-ID: <#4AnV2NYDHA.384@TK2MSFTNGP12.phx.gbl>
>> >Newsgroups: microsoft.public.win2000.group_policy
>> >NNTP-Posting-Host: gateway.nexeninc.com 204.209.24.2
>> >Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>> >Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.group_policy:11795
>> >X-Tomcat-NG: microsoft.public.win2000.group_policy
>> >
>> >Hi,
>> >I'm looking for some scripts that can be used to monitor various GPO
>> >maintenance related issues on a daily, weekly, and monthly basis (i.e.
>> >manage permissions, group assignments, user assignments, update
>procedures,
>> >GPO impact assessment...etc). Any info is appreciated. Best pracitces
>will
>> >do as well.
>> >
>> >Thanks!
>> >
>> >Ahmed
>> >
>> >
>> >
>>
>>
>> --
>> Jimmy Harper [MSFT]
>> Directory Services
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>rights. Use of included script samples are subject to the terms specified
>> at http://www.microsoft.com/info/cpyright.htm
>>
>> Note: For the benefit of the community-at-large, all responses to this
>message are best directed to the newsgroup/thread from which they
>> originated.
>>
>
>
>


--
Jimmy Harper [MSFT]
Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified
at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they
originated.