HGPM¶

The launcher

Start-HGPM: a tile for each tool of HGPM, in the language and the theme chosen for all of them. The launcher

Group Policy Management view

The domain, its OUs and their GPO links, the Group Policy Objects, as GPMC shows them; create, link, delete and restore GPOs, enforce, disable and order their links, block the inheritance, set their status and security filtering. The console

Policy editor

The administrative templates (ADMX/ADML), the security settings (GptTmpl.inf) and the Group Policy Preferences of a GPO, read from SYSVOL and saved there. The policy editor

History and approval

Backups with comments and labels, a timeline of each GPO, the differences between two versions, restore, drift from the approved version, and an approval workflow Tier 0 / Tier 1. Backups and history

Rights of the domain

The console offers what the account manages (its delegations) and shows the rest read only, the configuration is the one of the domain (SYSVOL), and the workflow relies on the ACLs of the directory and of SYSVOL only. Delegation

Password policies (PSO)

A second console, Show-PSOManagerAvalonia, for the fine-grained password policies, as the Active Directory Administrative Center: create and apply them, and see which one applies to a user or a group, and why. Password policies

WMI Filter Creator

WMI filters built from ready-made queries or a query builder, checked as they are typed, tested on the computer, exported to .mof or created in the domain. WMI filter creator

Policy Analyzer

GPOs, backups and the security baselines of Microsoft compared setting by setting, with the .PolicyRules files of the Security Compliance Toolkit; a baseline written in a GPO. Policy Analyzer

Audit log

What the consoles and the commands changed in the domain, on by default: who, when, from where, on which GPO, filtered and exported to CSV. Audit log