Skip to content

Cleaning up unlinked Group Policy objects in Active Directory using Powershell

Just a quick script below to run through all unlinked GPO’s in a domain, back them up, export a report and then remove them.

Sweet and short but useful. (# Comment the remove line if you don’t want to remove any)

Import-Module GroupPolicy
$backupPath=”C:\Users\jeffrl-p\Desktop\Backup_GPO”

ManageEngine Applications Manager

if (-Not(Test-Path -Path $backupPath)) {
 mkdir $backupPath
 }

Get-GPO -All | Sort-Object displayname | Where-Object { If ( $_ | Get-GPOReport -ReportType XML | Select-String -NotMatch “” )

{
$backupReportPath = $backupPath + “” + $_.DisplayName + “.html”
Backup-GPO -Name $_.DisplayName -Path $backupPath
Get-GPOReport -Name $_.DisplayName -ReportType Html -Path $backupReportPath
$_.DisplayName | Out-File $backupPath + “UnLinked_GPO_List.txt” -Append
$_.Displayname | remove-gpo -Confirm
}
}

active directory auditing solutions