GPO Version Powershell Cmdlets

Powershell cmdlets to get GPO version information and also to "Touch" a GPO's version to force clients to think the GPO has changed.

Print

Download

Rating:
  • Currently 2/5 Stars.
  • 1
  • 2
  • 3
  • 4
  • 5
Comments:2
Owner:Darren Mar-Elia
Created:6/4/2009
Modified:10/20/2009
Visited:3887

*** UPDATED 10/19/09 to fix issue with whatif parameter incorrectly reporting new GPO version

The download includes a DLL and Help file. This is a 32-bit Powershell snap-in for version 1.0 of Powershell. Copy the two files to a folder, startup Powershell, change directories to where you copied the DLL, and then run installutil to install the snap-in as follows:

C:\windows\Microsoft.NET\Framework\v2.0.50727\installutil sdmgpoversion.dll

One registered, type the following to add the snap-in to your current Powershell console:

add-pssnapin SDMSoftware.Powershell.GPOVersion

The snap-in comes with 2 cmdlets:

Get-SDMGPOVersion: Retrieves AD & SYSVOL version information for one or more GPOs on a particular DC (similar to GPOTool.exe except for Powershell)

Invoke-SDMTouchGPO: Lets you increment a GPO's version number to force clients to think something there has been a GPO change.

You can type get-help and then the cmdlet name to get syntax for each cmdlet

Comments

new-comment
Todd Lemmiksoo says:

Running a transacted installation. Beginning the Install phase of the installation. See the contents of the log file for the S:\utilities\AD\sdmgpoversion.dll assem bly's progress. The file is located at S:\utilities\AD\sdmgpoversion.InstallLog. Installing assembly 'S:\utilities\AD\sdmgpoversion.dll'. Affected parameters are: logtoconsole = assemblypath = S:\utilities\AD\sdmgpoversion.dll logfile = S:\utilities\AD\sdmgpoversion.InstallLog Unable to create an instance of the touchGP.touchGPSnapIn installer type. System.Reflection.TargetInvocationException: Exception has been thrown by the ta rget of an invocation. The inner exception System.Security.SecurityException was thrown with the follow ing error message: That assembly does not allow partially trusted callers.. An exception occurred during the Install phase. System.InvalidOperationException: Unable to create an instance of the touchGP.to uchGPSnapIn installer type. The inner exception System.Reflection.TargetInvocationException was thrown with the following error message: Exception has been thrown by the target of an invoc ation.. The inner exception System.Security.SecurityException was thrown with the follow ing error message: That assembly does not allow partially trusted callers.. The Rollback phase of the installation is beginning. See the contents of the log file for the S:\utilities\AD\sdmgpoversion.dll assem bly's progress. The file is located at S:\utilities\AD\sdmgpoversion.InstallLog. Rolling back assembly 'S:\utilities\AD\sdmgpoversion.dll'. Affected parameters are: logtoconsole = assemblypath = S:\utilities\AD\sdmgpoversion.dll logfile = S:\utilities\AD\sdmgpoversion.InstallLog Unable to create an instance of the touchGP.touchGPSnapIn installer type. System.Reflection.TargetInvocationException: Exception has been thrown by the ta rget of an invocation. The inner exception System.Security.SecurityException was thrown with the follow ing error message: That assembly does not allow partially trusted callers.. An exception occurred during the Rollback phase of the System.Configuration.Inst all.AssemblyInstaller installer. System.InvalidOperationException: Unable to create an instance of the touchGP.to uchGPSnapIn installer type. The inner exception System.Reflection.TargetInvocationException was thrown with the following error message: Exception has been thrown by the target of an invoc ation.. The inner exception System.Security.SecurityException was thrown with the follow ing error message: That assembly does not allow partially trusted callers.. An exception occurred during the Rollback phase of the installation. This except ion will be ignored and the rollback will continue. However, the machine might n ot fully revert to its initial state after the rollback is complete. The Rollback phase completed successfully. The transacted install has completed. The installation failed, and the rollback has been performed.

new-comment
Darren Mar-Elia says:

Make sure that you run the install with the DLL locally. Running from a network share as you are will hit the default .Net security limitations