If you want to find a
specific GPO setting, whether it is configured or not, the GPMC search
tool is perfect for you. The new search feature allows you to find
nearly any setting, based on almost any criteria. Because Group Policy
settings are so complex and numerous, a search tool needs to accommodate
almost any scenario. The GPMC search tool fulfills these requirements.
The search tool can
search all GPOs in all domains in the forest, or just a single domain of
GPOs. To access the search tool, you can right-click either the Forest
node or the <domainname>
node in the GPMC. Both of these options present a Search option, which
will open the Search for Group Policy Objects dialog box, shown in Figure 1.
The search tool allows you
to search on nearly every possible detail within a GPO. Each element of
the search tool is described here.
Search Item This
allows you to target specific areas of the GPO and Group Policy
infrastructure. You can select from one of many global areas of Group
Policy. When configuring the Search Item, you have the following
choices:
GPO Name
GPO-links
Security Group
Linked WMI Filter
User Configuration
Computer Configuration
GUID
Each
of these selected items will determine a more specific setting. After
configuring the Search Item, you define a Condition and Value, described
next.
Condition
Conditions are dynamic entries based on the Search Item that you
selected. Conditions allow you to indicate more specifically which GPOs
the search returns. Table 1
describes the Conditions available for each Search Item. After
selecting the Condition, you will have more options to refine your
search. This refinement is accomplished by configuring the Value option,
described next.
Table 1. GPMC/GPO Configuration Reference
| Search Item | Condition Options | Value Options |
|---|
| GPO Name | Contains | <Text entry> |
| | Does not contain | <Text entry> |
| | Is exactly | <Text entry> |
| GPO-links | Exist in | <domainname>
[All Sites] |
| | Do not exist in | <domainname>
[All Sites] |
| Security Group | Has this explicit permission | Apply settings
Edit settings
Edit settings, delete, modify security
Read settings |
| | Does not have this explicit permission | Apply settings
Edit settings
Edit settings, delete, modify security
Read settings |
| | Has this effective permission | Apply settings
Edit settings
Edit settings, delete, modify security
Read settings |
| | Does not have this effective permission | Apply settings
Edit settings
Edit settings, delete, modify security
Read settings |
| Linked WMI Filter (domain only) | Is | <WMI Filter name> |
| | Is not | <WMI Filter name> |
| User Configuration | Contains (same as Does not Contain) | Deployed Printer Connections
Folder Redirection
Group Policy Data Sources
Group Policy Device Settings
Group Policy Drive Maps
Group Policy Environment
Group Policy Files
Group Policy Folder Options
Group Policy Folders
Group Policy Ini Files
Group Policy Internet Settings
Group Policy Local Users and Groups
Group Policy Network Options
Group Policy Power Options
Group Policy Printers
Group Policy Regional Options
Group Policy Registry
Group Policy Scheduled Tasks
Group Policy Services
Group Policy Shortcuts
Group Policy Start Menu
Internet Explorer Branding
Internet Explorer Zonemapping
Microsoft Offline Files
Policy-based QoS
Registry
Scripts
Software Installation |
| Computer Configuration | Contains (same as Does not Contain) | 802.3 Group Policy
Deployed Printer Connections
EFS recovery
Group Policy Data Sources
Group Policy Device Settings
Group Policy Drive Maps
Group Policy Environment
Group Policy Files
Group Policy Folder Options
Group Policy Folders
Group Policy Ini Files
Group Policy Internet Settings
Group Policy Local Users and Groups
Group Policy Network Options
Group Policy Power Options
Group Policy Printers
Group Policy Regional Options
Group Policy Registry
Group Policy Scheduled Tasks
Group Policy Services
Group Policy Shortcuts
Group Policy Start Menu
Internet Explorer Zonemapping
Internet Protocol Security Policies
Microsoft Disk Quota
Microsoft Offline Files
Policy-Based QoS
QoS Packet Scheduler
Registry
Scripts
Security
Software Installation
Windows Search Group Policy Extension
Wireless Group Policy |
| GUID | Equals | <Text entry> |
Value Values
are specified based on the Search Item and Condition selected. The
Value allows the search tool to become very granular and detailed in the
search for GPOs. Each Condition selected has a specific Value that can
be configured. Table 7-1 includes all of the possible Values for each Condition that is specified.
The
combination of Search Item, Condition, and Value make a full entry for
the search criteria. You may enter many search criteria into the search
tool to restrict the results of your search. This type of combined
search is a powerful way to avoid the GPOs that you do not want to view
and restrict results when troubleshooting the application of GPOs.
