I try not to bring my day job into the blog all that often but I love these tools:
I don’t know that he is supporting them any more but they let you manipulate Group Policy in Windows environments in incredibly powerful and dangerous. Â The tool I’ve been using most: Gpscript.exe, lets you dump an entire group policy file out of Active Directory into what is essentially a registry file. Â You can then manipulate the text files and reupload them into AD Group Policy. Â Of course the potential to destroy the universe is great, but if you take your time and use this wisely, it is a fantastic tool. Â Particularly for large, unwieldy policies that involve a lot of hand input- Windows Firewall Group Policy can be pretty robust, but if you want to use it to its fullest, applying different policies to different sets of devices and the like, it is a practically impossible task because of the sheer amount of work you’ve got to put into creating exceptions and lists. Â GPscript.exe has made that task Â at least functional.