Have you ever noticed that there’s not many GPO related PowerShell cmdlets? I started out wanting to know what group policies existed that weren’t linked to OU’s and added a few other properties to return additional useful information for the ones that were:
You are unable to find specific GPO options such as “Compatibility View” settings for Internet Explorer. One of the first things to look at is: Where are the policy definitions being retrieved from? The default for an Active Directory environment is from the local machine as shown in the image below: If you’re editing the GPO on a domain controller and have multiple domain controllers that are running different operating system versions, the available options will vary from machine to machine.
You’re using group policy to enforce the “Run only approved Windows applications” for a specific group of computers such as terminal servers. After updating Adobe Reader from version 9.0 to 9.2, users receive the message: “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” My first thought was “The name of the executable must have changed”. A quick check disproved that. It is the same name with both versions: “AcroRd32.