Alan's Blog

"Yeah. I wrote a script that will do that."

Menu
  • About My Blog
Menu

Getting GPO GUID, Name from Active Directory

Posted on October 20, 2017 by Alan

You don’t have to rely on the Group Policy Module to resolve the display name of a GPO from the GUID, or the GUID from the display name.  Here are two short functions that will get that information from Active Directory. The first will return the GPO displayname attribute from a GUID. The GUID (sometimes called the ID), can be entered with or without the surrounding curly brackets.

Function Get-GPODisplayName($domain,$Guid){
    #Easier to later add braces in filter
    $GUID = [regex]::Replace($GUID,"{|}",'')
    $SearchRoot = "LDAP://$domain"
    $filter = "(&(objectCategory=groupPolicyContainer)(name={$GUID}))  "
    $ADSearcher = [adsisearcher] ''
    $ADSearcher.SearchRoot = $SearchRoot
    $ADSearcher.SearchScope = "SubTree"
    $ADSearcher.CacheResults = $false
    $adSearcher.ReferralChasing = "All"
    $ADSearcher.Filter = $filter
    $retval = $ADSearcher.FindOne()
    if ($retval)
    {
    $retval.Properties.displayname[0]
    }
    ELSE
    {
    'Unable to Determine'
    }
}

The second function does the reverse, returning the GUID from the DisplayName:

Function Get-GPOGUID($domain,$DisplayName){
    $SearchRoot = "LDAP://$domain"
    $filter = "(&(objectCategory=groupPolicyContainer)(Displayname=$DisplayName))"
    $ADSearcher = [adsisearcher] ''
    $ADSearcher.SearchRoot = $SearchRoot
    $ADSearcher.SearchScope = "SubTree"
    $ADSearcher.CacheResults = $false
    $adSearcher.ReferralChasing = "All"
    $ADSearcher.Filter = $filter
    $retval = $ADSearcher.FindOne()
    if ($retval)
    {
        $retval.properties['Name']
    }
    ELSE
    {
        'Unable to Determine'
    }
}

The domain parameter should be the DNS Domain root, not the NetBIOS or short name.

Leave a Reply

You must be logged in to post a comment.

Search

Please Note

All the scripts are saved as .txt files. Newer files have a “View Script” button which will let you save or open a script in notepad. For earlier posts, the easiest way to download with IE is to right click on the link and use “Save Target As”. Rename file from Name_ext.txt to Name.ext.

To see a full post after searching, please click on the title.

PowerShell Scripts were written with version 3 or later.

https connections are supported.

All new users accounts must be approved, as are comments. Please be patient.  If you find a post error or a script which doesn’t work as expected, I appreciate being notified.  My email is my first name at the domain name, and you are welcome to contact me that way.

Tags

1E ACLS Active Directory ActiveDirectory ADSI Advanced Functions Audit Change Administrator Password COMObject Computer Groups DateTime Desktop DNS Excel FileScriptingObject Forms General GPO GPS Group Policy Hacks ISE Lockout logons NAV740 Nessus OU OU permissions Outlook Pick Folder Power PowerShell Powershell Scriptlets RDP SCCM schedule reboot Scripting Security Shell.Application user information VBA Windows Update WMI WordPress WPF

Categories

akaplan.com

  • Back to Home Page

Archives

Scripting Sites

  • A Big Pile of Small Things
  • Adam, the Automator
  • Art of the DBA
  • Ashley McGlone
  • Boe Prox
  • Carlo Mancini
  • DexterPOSH
  • Doug Finke
  • Jaap Brasser's Blog
  • JeffOps The Scripting Dutchman
  • Jonathan Medd's Blog
  • Keith Hill's Blog
  • LazyWinAdmin
  • Nana Lakshmanan
  • PowerShell Magazine
  • PowerShell Team Blog
  • PowerShell.org
  • PwrShell.net
  • Richard Siddaway's Blog
  • Ryan Yates' Blog
  • Skatterbrainz
  • The Lonely Administrator

SQL Site

  • Art of the DBA

Meta

  • Register
  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org
©2025 Alan's Blog | Theme by SuperbThemes

Terms and Conditions - Privacy Policy