This message was deleted.

Have you looked at the GPO PoSH cmdlets from SDM Software (Darren mar-elia's gig)

OK, hadn't tried those, will take a look

You don't want to bill for the time to manually review 1500 GPOs? 🙂

I'm billing for every hour of the working day a few times over as it is....

At least they don’t need to pay for a decent product that would help them in this case ;) . How often in a day do you think “Appsense would be so helpful now?!”

Could AppSense help here? I could stand up a quick PoC with my NFR licenses sitting in DEV

well, you can search all over the place, so if the config were in Appsense already, the conditions should be searchable and show you where XP settings are still being used. but for an environment not in appsense yet / anymore, it wouldn't help no

Yeah no AppSense here (there was historically, but it's now long gone) 😞

James, I bet you were an AppSense bigot back in the day! :)

I heard a rumour to that effect, yes

Can you grep a gpresult HTML report for the string you care about? Do it once from each OS and compare?

MS Policy Analyser maybe? https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049