How to find a Group Policy Object (4256647)

A Group Policy Object (GPO) needs to be changed however first you need to locate where the GPO is in Active Directory (AD).

How to find a Group Policy Object location to edit it.

Run the following command to find the location of your Group Policy Object in Active Directory:

#/opt/quest/bin/vgptool listgpc

This is documention from the man page vgptool:

vgptool listgpc [ -u user ] [-l] [-x]

List the Group Policy Container (GPC) details of the Group Policy Objects associated with a QAS user or this QAS-enabled machine.

-u user
The presence of this argument signals that the Group Policy application event is for a QAS user. The name for the QAS user must be supplied to this argument.

-l
Use this option to request long output from the vgptool listgpc command. It provides additional detail on the specific attributes of Group Policy Objects and their assignment to Active Directory containers.

-x
This option makes vgptool listgpc display the Group Policy Objects that are blocked by the block inheritance setting.

The results displayed by this command are listed in order by the container to which the Group Policy Objects are assigned. The resulting information comes from the Group Policy Container and the Active Directory container that links to it. By default, the resulting list of Group Policy Objects includes only those that are not blocked by the block inheritance setting. Depending upon the options to this command, more details may be obtained.

Below are some examples of using this command:

vgptool listgpc
List GPC information that apply to the machine.

vgptool listgpc -l
Show verbose listing of machine policy containers.

vgptool listgpc -l -x
Includes block policies in verbose listing.

vgptool listgpc -u username
List user policy container information associated with username. Note: username must be logged in.

vgptool listgpc -u username -l
Verbose listing of user policy container information