Skip navigation

How can I check the health of my Group Policy Objects (GPOs) in Windows Server 2003?

A. You can use Gpotool, which is included in the Windows 2003 Resource Kit tools ( ), to perform a check of the local user's home domain policies. To use the tool, open a command line and type

which, on my machine displays the following sample output:
Validating DCs...
Available DCs:
Searching for policies...

Found 2 policies
Policy \{31B2F340-016D-11D2-945F-00C04FB984F9\}
Friendly name: Default Domain Policy
Policy OK

Policy \{6AC1786C-016F-11D2-945F-00C04FB984F9\}
Friendly name: Default Domain Controllers Policy
Policy OK
You can use Gpotool with the /verbose switch to get more detailed information, and you can select a specific domain, domain controller (DC), and GPO by using the /domain, /dc, and /gpo switches, respectively. By default, the tool checks all GPOs on all DCs for consistency between the information stored in AD and the information in the template within SYSVOL. This is a great tool to use to check the general health of your Group Policy environment.
Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.