Dont forget GPMC Scripts

Administrative
Script name Description
task
Back up all
Backs up all GPOs in a domain to the
GPOs in a BackupAllGPOs.wsf
specified folder.
domain
Given a GPO name or a globally unique
Back up a GPO BackupGPO.wsf identifier (GUID), backs up the GPO to
the specified folder.
Creates a new GPO and copies the
settings from the source GPO into the
Copy a GPO CopyGPO.wsf new destination GPO, given a source
GPO name or GUID and a new
destination GPO name.
Reads an XML file that specifies a
policy environment; for example,
Create a policy organizational units, GPOs, links, and
environment security groups. The script can either
CreateEnvironmentFromXML.wsf
using an XML create the environment in a domain by
representation creating the objects, or delete the
environment by deleting objects
specified in the XML file.
Create a GPO Creates a GPO with the specified name,
with default CreateGPO.wsf in the current domain, using the default
options options.
Creates migration tables that can be
edited and used to map paths and
Create a
CreateMigrationTable.wsf security principals to new values when
migration table
importing and copying GPOs across
domains.
Reads an existing policy environment
and creates an XML file representing
that environment. The XML file
Create an XML captures information about
representation of organizational units, GPOs, and GPO
CreateXMLFromEnvironment.wsf
a policy links, and security on GPOs. You can
environment use this script in conjunction with the
CreateEnvironmentFromXML.wsf
script to create a replica of a domain for
staging purposes.
Deletes the specified GPO when given
a GPO name or GUID. By default the
Delete a GPO DeleteGPO.wsf
script deletes links to that GPO within
the same domain.
Grant GrantPermissionOnAllGPOs.wsf Grants a user or group the specified
Permissions for level of permission for all GPOs in the
all GPOs in a
specified domain.
Domain
Imports the settings from the specified
Import settings
ImportGPO.wsf backup to an existing destination GPO
into a GPO
in the specified domain.
Creates a new GPO and imports
Import multiple
settings into that GPO for each backed-
GPOs into a ImportAllGPOs.wsf
up GPO stored at a specific file system
domain
location.
Restore a GPO RestoreGPO.wsf Restores a backed-up GPO.
Restores all GPOs that are stored at a
Restore all GPOs RestoreAllGPOs.wsf
given file system location
Grant Grants a user or group the specified
permissions for permission type for all GPOs that are
GPOs linked to a linked to a specified domain,
SetGPOPermissionsBySOM.wsf
domain, organizational unit, or site. You can
organizational specify Read, Apply, Edit, FullEdit,
unit, or site or None for the permission type.
Sets the permission level for a security
Set GPO principal on a given GPO. You can
SetGPOPermissions.wsf
permissions specify Read, Apply, Edit, FullEdit,
or None for the permission type.
Grants or removes the ability to create
Set permissions
SetGPOCreationPermissions.wsf GPOs in a domain for a given security
to create GPOs
principal.
Set policy-
related
permissions on a Sets policy-related permissions on a
given site, SetSOMPermissions.wsf given site, domain, or organizational
domain, or unit.
organizational
unit
List disabled Prints all GPOs in the specified domain
FindDisabledGPOs.wsf
GPOs that are disabled or partially disabled.
Prints the information for a specific
GPO, including creation time,
modification time, owner, status,
List GPO
DumpGPOInfo.wsf version number, security groups that
information
filter the GPO, security groups that
have full control, edit, read, or custom
permissions, and links.
Prints information for a specific site,
List scope of
domain, or organizational unit,
management DumpSOMInfo.wsf
including GPO links and policy-related
information
permissions.
List GPO by FindGPOsByPolicyExtension.wsf Prints all GPOs in the specified domain
 for which a specific policy extension is
configured; for example, find all GPOs
policy extension
that contain the Software Installation or
Folder Redirection policy settings.
Prints all GPOs on which a given
security principal has the specified
List GPOs by
FindGPOsBySecurityGroup.wsf permission or effective permission. You
security group
can specify Read, Apply, Edit, or
Fulledit for the permission type.
List GPOs with Prints all GPOs in the specified domain
FindDuplicateNamedGPOs.wsf
duplicate names that have duplicate names.
Prints all GPOs in the specified domain
List GPOs
that do not apply to anyone because
without Apply FindGPOsWithNoSecurityFiltering.wsf
Apply permission is not set on the
permission
GPO.
Listing GPOs Finds and prints all GPOs in SYSVOL
Orphaned in FindOrphanedGPOsInSYSVOL.wsf with no corresponding component in
SYSVOL Active Directory.
List domains,
organizational Prints all domains, organizational units,
units, and sites FindSOMsWithExternalGPOLinks.wsf and sites in the specified domain that
with external link to a GPO in a different domain.
GPO links
Prints all GPOs in the specified domain
List unlinked
that have no links. Links outside the
GPOs in a FindUnlinkedGPOs.wsf
domain, including site links, are not
domain
checked.
Get reports for Takes a domain name, and gets reports
GetReportsForAllGPOs.wsf
all GPOs for all GPOs in that domain.
Get reports for Generates XML and HTML reports for
GetReportsForGPO.wsf
GPO a given GPO.
List all GPOs in
ListAllGPOs.wsf Prints all GPOs in the specified domain.
a domain
Prints a list of all organizational units in
Print the scope of
the specified domain with the list of
management ListSOMPolicyTree.wsf
GPOs that are linked to the domain and
policy tree
each organizational unit.
List GPO
Prints information about all backed up
backups in a
QueryBackupLocation.wsf GPOs at the file system location
given file system
specified by the user.
location
When you install GPMC, a set of sample scripts are installed to the %programfiles
%\gpmc\scripts directory.

The sample scripts address real-world administrative problems and scenarios. You can perform
various tasks such as finding all Group Policy objects (GPOs) in a domain that have duplicate
names or generating a list of all GPOs in a domain whose settings are disabled or partially
disabled