Advanced Windows PowerShell Scripting Video Training

Advanced Windows PowerShell Scripting Video Training
Advanced Windows PowerShell Scripting Video Training

Thursday, October 30, 2014

Getting the Last Modification Time of a GPO

Ideas are rolling in my 6293: Troubleshooting and Supporting Windows® 7 in the Enterprise class here in Yokosuka, Japan.  Although PowerShell is not part of this class, the only answer to many questions is with PowerShell.  OK, the best answer is with PowerShell.

The problem that the client was facing is that a problem may mysteriously pop up.  The question, is there a way to determine if Group Policy has recently been modified?  The GPO object contains both a creation, and the last modification time stamp.  The code below will let you either gather the modification time stamps for all GPOs, or those that have be modified within a specific time period.

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

 

 

Function Get-GPOModifications

{

    Param (

        [INT]$Hours = 0,

        [INT]$Days = 0

    )

   

    # The IF statement will execute only if the HOURS or DAYS

    # parameters are used.  If not, all GPOs will be reported.

    If (($Hours -ne 0) -or ($Days -ne 0))

    {

     Get-GPO -All  |

        Where-Object {$_.ModificationTime -gt ((Get-Date).AddHours((-1*$Hours)+(-1*$Days*24)))} |

        Select-Object -Property DisplayName, ModificationTime

    }

    Else

    {

     Get-GPO -All  |

        Select-Object -Property DisplayName, ModificationTime

    }

<#

.SYNOPSIS

Recovers the last modification time of all group policies

 

.DESCRIPTION

Recovers the last modification time of all group policies or allows you to search for GPOs that have been recently modified.

 

.PARAMETER Days

Returns the GPOs that have been modified within the provided number of days.

 

.PARAMETER Hours

Returns the GPOs that have been modified within the provided number of hours.

 

.EXAMPLE

Get-GPOModifications

 

Returns all GPOs in the current domain with their latest modification times.

 

.EXAMPLE

Get-GPOModifications -Hours 2

Returns all GPOs that have been modified within the last 2 hours.

 

.NOTES

===============================================================================

Copyright MCTExpert of Arizona 2014.  All Rights Reserved.

- Code is provided as is and without warranty.

- User assumes all risk and liability.

===============================================================================

#>

} # End: Function Get-GPOModifications

No comments: