Find missing, bad, old ADMX files

[PrzemyslawKlys]

No description provided.

[Karl-WE]

Hi @PrzemyslawKlys how about having a Script to remove adm files from GPOs
Done so lately after a successful session with your awesome tool.

The removal is simple on FS

#Fetch Domain Name with either Resolve-DNSName or Get-ADDomain (latter has a module requirement) 
#how-to to handle multi Domain? 
[string]$DomainameFQDN = 

#Locate Policies folder in sysvol 
[string]$SysvolLocation = 

#Fetch and remove adm templates
[array]$ADMFiles = Get-Childitem *.adm -Files - Recurse | Remove-Item -force - confirm:$false

#ToDo Find a way to remove the from being linked in GPOs 
#as a workaround: log output of path where they were found 

$ADMFiles.Directory | Get-Unique

I hope this isn't a duplicate report or implemented, could not find it. Code snipped may contain errors. Written from the top of my mind how I solved it.

[Karl-WE]

Remote related #41

[Karl-WE]

I would be also thinking about how to find old (outdated ADMX and remove them from from the store) maybe the other project that's updating them could join forces to cleanup old ones.

[PrzemyslawKlys]

For ADM files:

• Get-GPOZaurrLegacyFiles
• Remove-GPOZaurrLegacyFiles
• Invoke-GPOZaurr -Type SysVolLegacyFiles

For ADMX cleanup - I started playing with it a while ago, but couldn't decide on the best approach. I have my own idea on ADMX but if someone wants to help - go ahead ;)

[PrzemyslawKlys]

Also for ADM files:

• Get-GPOZaurrFiles
• Invoke-GPOZaurr -Type GPOFiles - which does a more insight analysis and shows the user where some files may be misplaced

For ADMX:

• Get-GPOZaurrFilesPolicyDefinition - but that's just whether signature matches

[Karl-WE]

The legacy files thing is what I searched for. We went through the invoke-GPOzaurr twice but were not able to find the tab.

Could you help Przemek?

[PrzemyslawKlys]

Ye, just run Invoke-GPOZaurr -Type SysVolLegacyFiles. It's not enabled by default. You have to explicitly ask for it. Not all GPO reports are enabled by default. There are also others which are disabled for different reasons.