View GPOs and policy settings
In the ARM web client, you can view the Group Policy Objects (GPOs) collected by the latest Active Directory scan, the policies configured in each GPO, and the policies that are available to configure. Viewing GPOs does not change Active Directory.
To view GPOs, your ARM user needs read access to the web client. See Group Policy Objects (GPOs) in the web client for prerequisites.
View the GPOs in a domain
-
Log in to the ARM web client.
-
In the main menu, click GPO. The Group Policy Objects (GPOs) page lists the domains for which GPO scan data exists.
-
Click a domain. The list of GPOs in the domain is displayed.
-
Click a GPO to display its details.
GPO metadata
For each GPO, the following information is available:
- Display name and distinguished name
- Created time and modified time
- Status, which shows whether the user settings, the computer settings, or both are enabled or disabled
- Version number
- SYSVOL path
- Link path, which shows the OUs or domain that the GPO is linked to
- Security filtering
- WMI filter
- Whether user settings and computer settings are configured
Configured policies
The details of a GPO list the policies that are configured in the GPO, based on the latest scan. For each policy, the following information is shown:
- Category
- Scope: Computer or User
- Category path
- Policy name and description
- State and value
- Registry key and registry value name
Available policies
You can browse read-only catalogs of the policies that are available in a domain. The catalogs are available for the Computer scope and for the User scope:
- Administrative Template policies
- Security Settings policies
The GPO views show data from the latest Active Directory scan. Changes made to GPOs outside of ARM are displayed after the next AD scan.