Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm monitoring ad logs, when someone modify an AD Object, I could see a log, but only the GUID of that Group Policy was provided in the line.

So given an GUID of a Group Policy, is it possible to get the name that was displayed in gpmc.msc? (I mean to use LDAP protocol to get that)

share|improve this question
up vote 10 down vote accepted

LDAP? That guid is an attribute on an object in Active Directory, so yes you can query for it:


LDAP query example

You can also search for that value in the Group Policy Management Console:

enter image description here

share|improve this answer
Yep, this works great with dsquery as well: dsquery * -filter "(objectCategory=groupPolicyContainer)" -attr displayName objectGUID -limit 0 – jscott Dec 27 '12 at 19:38

You can use PowerShell's Get-GPO cmdlet for this. It contains a -GUID switch, which is what you want to use here. You also need to have the AD Commandline Tools from RSAT installed so that you have access to the Group Policy module. If you use the AD module, you have this installed already.

The example in the linked article is:

Import-Module GroupPolicy
Get-GPO -Guid 31a09564-cd4a-4520-98fa-446a2af23b4b -Domain
share|improve this answer
Up voting this because more people should look to powershell first – Mark Jun 19 '14 at 21:12

Sure. Open Group Policy Management. Navigate to a GPO. Click on the Details tab for that GPO. Look at the Unique ID property.


share|improve this answer
-1 because while that will work nobody wants to look at every item in an attempt to find the name for that GUID. – John Gardeniers Dec 27 '12 at 22:01

This script allows you to enumerate all the GPOs in your Active Directory domain and get their names, GUIDs and SIDs.

$gpolist = Get-QADObject -Type groupPolicyContainer
foreach ($objResult in $gpolist) {
    Write-Host $ ";" $objResult.GUID ";" $objResult.displayname

And moreover you can refer these links also.

Hope it helps for you.

share|improve this answer
You should note that this requires the Qwest AD cmdlets and link to them. People that don't know will read this and wonder why it doesn't work on their machine. – MDMarra Dec 27 '12 at 12:19
You may find the Format-Table or ConvertTo-Csv cmdlets easier to work with than manually formatting with Write-Host. – jscott Dec 27 '12 at 19:42

This simple PowerShell will export a list of all your domain GPOs with GUID to a .csv.

Get-GPO -All ** | Export-CSV *folder\file.csv*

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.