Ideas are rolling in my 6293: Troubleshooting and Supporting Windows® 7 in the Enterprise class here in Yokosuka, Japan. Although PowerShell is not part of this class, the only answer to many questions is with PowerShell. OK, the best answer is with PowerShell.
The problem that the client was facing is that a problem may mysteriously pop up. The question, is there a way to determine if Group Policy has recently been modified? The GPO object contains both a creation, and the last modification time stamp. The code below will let you either gather the modification time stamps for all GPOs, or those that have be modified within a specific time period.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
| Function Get-GPOModifications { Param ( [INT]$Hours = 0, [INT]$Days = 0 )
# The IF statement will execute only if the HOURS or DAYS # parameters are used. If not, all GPOs will be reported. If (($Hours -ne 0) -or ($Days -ne 0)) { Get-GPO -All | Where-Object {$_.ModificationTime -gt ((Get-Date).AddHours((-1*$Hours)+(-1*$Days*24)))} | Select-Object -Property DisplayName, ModificationTime } Else { Get-GPO -All | Select-Object -Property DisplayName, ModificationTime } <# .SYNOPSIS Recovers the last modification time of all group policies
.DESCRIPTION Recovers the last modification time of all group policies or allows you to search for GPOs that have been recently modified.
.PARAMETER Days Returns the GPOs that have been modified within the provided number of days.
.PARAMETER Hours Returns the GPOs that have been modified within the provided number of hours.
.EXAMPLE Get-GPOModifications
Returns all GPOs in the current domain with their latest modification times.
.EXAMPLE Get-GPOModifications -Hours 2 Returns all GPOs that have been modified within the last 2 hours.
.NOTES =============================================================================== Copyright MCTExpert of Arizona 2014. All Rights Reserved. - Code is provided as is and without warranty. - User assumes all risk and liability. =============================================================================== #> } # End: Function Get-GPOModifications |
Comments