![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" "\\"Hey,")
<\/p>\n<\/p>\n
<\/p>\n
Hey, Scripting Guy! I need to work with Group Policy Objects (GPOs) by using a Windows PowerShell script. I understand there are new Group Policy cmdlets in Windows 7, but when I use the Get-Command<\/strong> cmdlet, I do not see any cmdlets. Is this a Release-to-Web (RTW) feature, or did it not make the cut for the final product?<\/p>\n — CT<\/p>\n <\/p>\n Hello CT, <\/p>\n Microsoft Scripting Guy Ed Wilson here. Today is going to be a great day. It began with a flurry of Twitter messages, continued by my updating our departmental calendar with three presentations to various user groups, and followed by a couple of meetings this afternoon. I am sipping a cup of green tea with a cinnamon stick in it, listening to Deep Purple on my Zune HD, and answering email sent to scripter@microsoft.com<\/a>. <\/p>\n CT, the Windows PowerShell cmdlets for Group Policy do in fact exist, but you probably need to take an extra step to gain access to them. If you are working on a Windows Server 2008 R2 server, you need to add the Group Policy Management Console (GPMC). To do this, use the Add Features Wizard and select Group Policy Management from the list of features to install on the server, as shown in the following image.<\/p>\n <\/a><\/p>\n You do not have to use the GUI wizard if you do not wish to do so. In addition, you do not have to use Remote Desktop to work remotely. Using Windows PowerShell 2.0, you can easily create a remote session on the remote server from your desktop computer. After the remote session is established, I like to change my working directory to the root of the c:\\ drive to free up some of the command line. This is shown here:<\/p>\n PS C:\\> Enter-PSSession -ComputerName hyperv-box You will need to load a module to perform server management. If you are not sure of the exact name of the module, you can obtain a listing of all modules by using the Get-Module<\/strong> cmdlet with the –listavailable<\/strong> switch. This is seen here.<\/p>\n [hyperv-box]: PS C:\\> Get-Module -ListAvailable<\/p>\n ModuleType Name <\/span>ExportedCommands [hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n ServerManager<\/strong> is the module that provides the ability to add and to remove features. To import it into the current session, use the Import-Module<\/strong> cmdlet. The cool thing is that while the ServerManager<\/strong> module exists on the remote Windows Server 2008 R2 server, it does not exist on the Windows 7 computer that I am using to perform the configuration. If ServerManager<\/strong> is too much typing, you can use wildcard characters to shorten the name. The import-manager command is shown here:<\/p>\n [hyperv-box]: PS C:\\> Import-Module server* To see what commands are exported to the Windows PowerShell session by the ServerManager module use the Get-Command cmdlet with the –module switch. This is shown here:<\/p>\n [hyperv-box]: PS C:\\> Get-Command -Module server*<\/p>\n CommandType <\/span>Name <\/span>Definition [hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n The Add-WindowsFeature<\/strong> cmdlet is used to add features to the Windows Server 2008 R2 machine. The problem now is that there is no telling what the Group Policy Management Console feature is called from the command line. To determine the information need to add the feature, use the Get-Feature <\/strong>cmdlet to create a list. Choose both the name<\/strong> and the displayname<\/strong> of the feature. I also sort the name of features, and format it in a table. The command and the associated output is shown here:<\/p>\n [hyperv-box]: PS C:\\> Get-WindowsFeature | Sort-Object -Property displayname | Format DisplayName <\/span>Name <\/span><\/span>à<\/span><\/span>Output Truncated <\/span><\/span>à<\/span><\/span><\/span> The name of the feature is GPMC<\/strong>. Armed with this information, it is easy to use the Add-WindowsFeature<\/strong> cmdlet to add the GPMC feature. After you have run the command, use the Get-WindowsFeature<\/strong> to reassure yourself that the feature is actually installed:<\/p>\n [hyperv-box]: PS C:\\> Add-WindowsFeature -Name gpmc<\/p>\n Success Restart Needed Exit Code Feature Result [hyperv-box]: PS C:\\> Get-WindowsFeature -Name gpmc<\/p>\n Display Name <\/span>Name [hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n While the feature is being installed, a progress bar is produced across the top of the Windows PowerShell console. This is shown in the following image.<\/p>\n On a Windows 7 computer, you will need to add the Remote Server Administration Tools (RSAT) to gain access to the Group Policy cmdlets. You will first need to download the RSAT tools for your platform<\/a>, either 64 bit or 32 bit Windows 7. The amd64fre_GRMRSATX_MSU.msu version works on my Intel 64-bit computer. <\/p>\n Once you have downloaded and installed the proper RSAT package, you have to go into Control Panel\/Programs and Features and choose Turn Windows Features on or off. This step requires admin rights. The RSAT package adds the Remote Server Administration Tools item in the dialog box. The dialog is shown in the following image.<\/p>\n <\/a><\/p>\n Because we are talking about using Windows PowerShell to manage Group Policy make sure you select the Group Policy Management Tools. Go ahead and add other tools that you feel you would like to have as well. Unfortunately, there does not seem to be an “Add all tools” button, and therefore you are forced to navigate through dozens and dozens of nested little check boxes to add all the tools. This is seen in the following image.<\/p>\n <\/a><\/p>\n After you have added the Group Policy Management Tools you can import the grouppolicy module and begin using the cmdlets. We will look at that tomorrow. <\/p>\n CT that is all there is to installing and accessing the Group Policy Management Windows PowerShell cmdlets. Group Policy Week will continue tomorrow when we will talk about importing the GroupPolicy<\/strong> module into the current Windows PowerShell session and exploring the available cmdlets. <\/p>\n If you would like to follow us on Twitter<\/a> or Facebook<\/a> we would love to interact with you. Some of the ideas for this week’s Group Policy articles came from suggestions I received on Twitter. If you have any questions, send e-mail to us at scripter@microsoft.com<\/a> or post them on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n Ed Wilson and Craig Liebendorfer, Scripting Guys<\/strong><\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Hey, Scripting Guy! I need to work with Group Policy Objects (GPOs) by using a Windows PowerShell script. I understand there are new Group Policy cmdlets in Windows 7, but when I use the Get-Command cmdlet, I do not see any cmdlets. Is this a Release-to-Web (RTW) feature, or did it not make the […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[152,3,45],"class_list":["post-17781","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-group-policy","tag-scripting-guy","tag-windows-powershell"],"acf":[],"blog_post_summary":" Hey, Scripting Guy! I need to work with Group Policy Objects (GPOs) by using a Windows PowerShell script. I understand there are new Group Policy cmdlets in Windows 7, but when I use the Get-Command cmdlet, I do not see any cmdlets. Is this a Release-to-Web (RTW) feature, or did it not make the […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/17781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=17781"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/17781\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=17781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=17781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=17781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" "\\"Hey,")
<\/p>\n![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2010\/july\/hey0712\/hsg-07-12-10-01.jpg\")
<\/p>\n
[hyperv-box]: PS C:\\Users\\ed\\Documents> sl c:\\
[hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n
———- —- <\/span>—————-
Manifest <\/span>ActiveDirectory <\/span>{}
Manifest <\/span>ADRMS <\/span>{}
Manifest <\/span>ADRMSAdmin <\/span>{}
Manifest <\/span>AppLocker <\/span> <\/span>{}
Manifest <\/span>BestPractices <\/span>{}
Manifest <\/span>BitsTransfer <\/span>{}
Manifest <\/span>FailoverClusters <\/span>{}
Manifest <\/span>GroupPolicy <\/span>{}
Manifest <\/span>NetworkLoadBalancingCl… {}
Manifest <\/span>PSDiagnostics <\/span>{}
Manifest <\/span>ServerManager <\/span>{}
Manifest <\/span>TroubleshootingPack <\/span>{}
Manifest <\/span>WebAdministration <\/span>{}<\/p>\n
[hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n
———– <\/span>—- <\/span> <\/span>———-
Cmdlet <\/span>Add-WindowsFeature <\/span>Add-WindowsFeature [-Name] <Fe…
Cmdlet <\/span>Get-WindowsFeature <\/span>Get-WindowsFeature [[-Name] <S…
Cmdlet <\/span>Remove-WindowsFeature <\/span>Remove-WindowsFeature [-Name] …<\/p>\n
-Table displayname, name -AutoSize<\/p>\n
———– <\/span>—-
.NET Environment <\/span>WAS-NET-Environment
.NET Extensibility <\/span>Web-Net-Ext
.NET Framework 3.5.1 <\/span>AS-NET-Framework
.NET Framework 3.5.1 <\/span> <\/span>NET-Framework-Core
.NET Framework 3.5.1 Features <\/span>NET-Framework
Active Directory Administrative Center <\/span>RSAT-AD-AdminCenter
Active Directory Certificate Services <\/span>AD-Certificate
Active Directory Certificate Services Tools <\/span>RSAT-ADCS
Active Directory Domain Controller <\/span>ADDS-Domain-Controller
Active Directory Domain Services <\/span>AD-Domain-Services
Active Directory Federation Services <\/span>AD-Federation-Services
Active Directory Lightweight Directory Services <\/span>ADLDS
Active Directory module for Windows PowerShell <\/span>RSAT-AD-PowerShell
Active Directory Rights Management Server <\/span> <\/span>ADRMS-Server
Active Directory Rights Management Services <\/span>ADRMS
Active Directory Rights Management Services Tools <\/span>RSAT-RMS
AD DS and AD LDS Tools <\/span>RSAT-AD-Tools
AD DS Snap-Ins and Command-Line Tools <\/span>RSAT-ADDS-Tools
AD DS Tools <\/span>RSAT-ADDS
AD FS Web Agents <\/span>ADFS-Web-Agents
AD LDS Snap-Ins and Command-Line Tools <\/span>RSAT-ADLDS
Administration Tools <\/span>ADDS-IDMU-Tools
Application Development <\/span>Web-App-Dev
Application Server <\/span>Application-Server
ASP <\/span> <\/span>Web-ASP
ASP.NET <\/span>Web-Asp-Net
Background Intelligent Transfer Service (BITS) <\/span>BITS
Basic Authentication &nbs\np; <\/span>Web-Basic-Auth
BitLocker Drive Encryption <\/span>BitLocker
BitLocker Drive Encryption Administration Utilities <\/span>RSAT-BitLocker
BitLocker Drive Encryption Tools <\/span>RSAT-Bitlocker-DriveEnc
BitLocker Recovery Password Viewer <\/span> <\/span>RSAT-Bitlocker-RecPwd
BITS Server Extensions Tools <\/span>RSAT-Bits-Server
BranchCache <\/span>BranchCache
BranchCache for network files <\/span>FS-BranchCache
Certificate Enrollment Policy Web Service <\/span>ADCS-Enroll-Web-Pol
Certificate Enrollment Web Service <\/span>ADCS-Enroll-Web-Svc
Certification Authority <\/span>ADCS-Cert-Authority
Certification Authority Tools <\/span> <\/span>RSAT-ADCS-Mgmt
Certification Authority Web Enrollment <\/span>ADCS-Web-Enrollment
CGI <\/span>Web-CGI
Claims-aware Agent <\/span>ADFS-Claims
Client Certificate Mapping Authentication <\/span>Web-Client-Auth
COM+ Network Access <\/span>AS-Ent-Services
Command-line Tools <\/span>Backup-Tools
Common HTTP Features <\/span> <\/span>Web-Common-Http
Compact Server <\/span>BITS-Compact-Server
Configuration APIs <\/span>WAS-Config-APIs
Connection Manager Administration Kit <\/span>CMAK
Custom Logging <\/span>Web-Custom-Logging
Default Document <\/span>Web-Default-Doc
Deployment Server <\/span>WDS-Deployment
Desktop Experience <\/span> <\/span>Desktop-Experience
DFS Namespaces <\/span>FS-DFS-Namespace
DFS Replication <\/span>FS-DFS-Replication
DHCP Server &nbs\np; <\/span>DHCP
DHCP Server Tools <\/span>RSAT-DHCP
Digest Authentication <\/span>Web-Digest-Auth
DirectAccess Management Console <\/span>DAMC
Directory Browsing <\/span> <\/span>Web-Dir-Browsing
Directory Service Integration <\/span>MSMQ-Directory
Distributed File System <\/span>FS-DFS
Distributed File System Tools <\/span>RSAT-DFS-Mgmt-Con
Distributed Scan Server <\/span>Print-Scan-Server
Distributed Transactions <\/span>AS-Dist-Transaction
DNS Server <\/span>DNS
DNS Server Tools <\/span>RSAT-DNS-Server
Dynamic Content Compression <\/span>Web-Dyn-Compression
Failover Clustering Tools <\/span>RSAT-Clustering
Fax Server <\/span>Fax
Fax Server Tools <\/span> <\/span>RSAT-Fax
Feature Administration Tools <\/span>RSAT-Feature-Tools
Federation Service <\/span>ADFS-Federation
Federation Service Proxy <\/span>ADFS-Proxy
File Server <\/span>FS-FileServer
File Server Resource Manager <\/span>FS-Resource-Manager
File Server Resource Manager Tools <\/span>RSAT-FSRM-Mgmt
File Services <\/span> <\/span>File-Services
File Services Tools <\/span>RSAT-File-Services
FTP Extensibility <\/span>Web-Ftp-Ext
FTP Server <\/span>Web-Ftp-Server
FTP Service <\/span>Web-Ftp-Service
Group Policy Management &nb\nsp; <\/span>GPMC<\/p>\n
[hyperv-box]: PS C:\\><\/span><\/span><\/span><\/p>\n
——- ————– ——— ————–
True <\/span>No <\/span>Success <\/span>{Group Policy Management}<\/p>\n
———— <\/span>—-
[X] Group Policy Management <\/span>GPMC<\/p>\n![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2010\/july\/hey0712\/hsg-07-12-10-02.jpg\")
<\/p>\n![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2010\/july\/hey0712\/hsg-07-12-10-03.jpg\")
<\/p>\n![\"Image](\"http:\/\/img.microsoft.com\/library\/media\/1033\/technet\/images\/scriptcenter\/qanda\/hsg\/2010\/july\/hey0712\/hsg-07-12-10-04.jpg\")
<\/p>\n