GPO Compare

Question

Is there a way we can compare 2 user policy GPO ? So we have a weird behavior. When a specific user logs in everything works but if the some other user logs on to the same device it does not. Both the user are in same OU. So just scratching my head to find out.

The issue is we have DELL C2422HE monitor connected to Lenovo X1 Carbon Gen 5. when we disconnect: the windows says unrecognized usb device. If I login with a specific user everything works but some other user gives me an error on to the same device. So want to compare and check each and every user based setting to see what’s the difference. Any help is much appreciated. Running windows 10 1909 build

Answer 1

You can run gpresult/h C:\report.html to generate all group policy result with each user logon, and save them to compare.

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hello anonymous user,

Thank you for posting here.

Based on the description above, I understand the users are domain users and windows 10 1909 build is domain joined machine.

We can export user GPO settings as below and compare them.
1.Logon the machine using one domain account (such as user1).
2.Create a new folder in C drive or D drive (such as D:\folder1).
3.Open CMD (do not run as Administrator).
4.Type gpresult /h D:\folder1\GPO1.html and click Enter.

And

1.Logon the machine using one domain account (such as user2).
2.Create a new folder in C drive or D drive (such as D:\folder2).
3.Open CMD (do not run as Administrator).
4.Type gpresult /h D:\folder2\GPO2.html and click Enter.

Open GPO1.html and GPO2.html and compare all the GPO settings under "User Details".

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

Just checking if there's any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

It was my bad. I know how to take the html report, but my question was how we can compare. We have 100 of settings and its not easy to go over one by one. so was looking if anyone is aware a simple tool or some other way to compare the html output files similar to what we have as Policy Analyzer tool

Answer 5

Here you go.
https://techcommunity.microsoft.com/t5/microsoft-security-baselines/new-tool-policy-analyzer/ba-p/701049

--please don't forget to Accept as answer if the reply is helpful--