Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What tools would you recommend for comparing two GPO and identifying differences? AGPM is not the option as we do not have a Software Assurance contract with Microsoft.

Is there anything else?

Thank you

share|improve this question

closed as off topic by Zoredache, joeqwerty, HopelessN00b, Ward, Bryan Nov 19 '12 at 22:03

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

I tend to use my eyes, actually. Open two instances of Group Policy manager, put one on one screen, one on the other screen and go through it.

You could also possibly use a text or code diffing tool if you opened up the objects in a text editor... but that really seems like a lot more work than putting the two GPOs up, side-by-side and looking at them.

share|improve this answer

How about exporting the GPOs you want to compare in a file and then use any tool you want to compare the contents.

You can export the GPOs using Powershell

Import-Module GroupPolicy

Get-GPOReport -Name GPO1 -ReportType xml -Path GPO1.xml
Get-GPOReport -Name GPO2 -ReportType Xml -Path GPO2.xml

You can find more info about using Powershell GPO cmdlets here

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.