►
Description
This presentation will primarily showcase usage of the PowerShell module TrackGpo, how it can tie in to Git repos, and how to extend its functionality. TrackGPO is a PowerShell module that allows you to track changes to Group Policy Objects (GPOs) easily.
Join Devin as he talks about challenges that he faced while turning group policy into a predictable and usable set of data!
Devin is a 10 year professional in the IT industry. He primarily works with automation, networking, and security in the financial services sector. He got his start in IT as a 15-yr old at his high school where he ran/terminated Ethernet cables and administered the school WiFi. This experience in high school led him to get a B.S. in Information Technology - Network Administration. He and his wife live in Utah and have 4 children. Most recently, he has been playing around with NoSql in Azure Cosmos DB.
A
All
right
good
evening
and
welcome
to
the
research
triangle,
powershell
user
group,
we're
super
excited
to
have
devon,
rich,
join
us
and
he
is
just
a
a
member
of
the
community
who
came
to
one
of
our
meetings
in
the
past
and
decided
hey.
I
got
this
thing
and
you
know
I
can
talk
about
that
and
we
said
this
is
perfect.
A
This
is
a
great
topic
for
you
to
talk
about,
and
simply
this
is
encouraging
him
to
now
present
and
we're
super
excited
to
have
him
join
us,
and
you
know
devin
how
you
doing
good.
How
are
you
phil
I'm
doing?
Well,
I'm
you
know
you
mentioned.
This
is
your
first.
You
know
presentation
like
this.
I
think
you're
gonna
do
a
great
job
and
you
know
so
take
it
away.
B
B
The
only
thing
that
I
would
add
is
definitely
that
this
is
an
interactive
presentation,
so
I'm
not
expecting
you
to
hold
all
your
questions
to
the
end.
If
you
have
something,
please
speak
up,
break
in,
raise
your
hand
in
chat,
say,
send
something
chat,
phil
yell
at
me
and
get
me
to
stop
for
a
minute
if
I'm
just
going
on
and
on,
but
I'm
I'm
happy
to
answer
questions
as
we
go.
It
won't
break
my
train
of
thought
too
much.
I
don't
think
a
little
bit
about
me.
I'm
a
regular
systems
administrator.
B
I
don't
think
I'm
the
smartest
person
here.
So
if
you
were
thinking
wow
devin,
you
look
like
you're,
not
very
smart.
That's
fine,
you're,
probably
smarter
than
me
no
problem.
I
would
even
include
if
you
have
suggestions-
or
you
have
thoughts
about
what
I
present
of
how
it
could
be
improved.
I
think
that's
a
valuable
discussion
to
to
bring
up
here
in
a
user
group
like
this
and
say:
have
you
considered
doing
it
this
way?
B
Or
you
know
this
seems
like
another
way
that
you
could
have
done
the
same
thing
that
would
be
cleaner
or
whatever
else,
because
talking
about
those
things
is
really
helpful
for
all
those
that
are
passively
listening
as
well
as
for
me,
I
like
learning
new
things
too,
I'm,
I
guess
I'm
technically
not
a
sysadmin.
Only
anymore,
I
my
title
includes
it
manager.
I
also
do
cloud
stuff
devops
stuff,
something
all
in
there.
I
work
for
a
small
company,
so
I
wear
many
hats.
B
I
get
to
do
lots
of
different
things
on
any
given
day,
which
is
a
lot
of
fun.
I
enjoy
the
variety,
but
mostly
I
spend
my
time
in
powershell,
whether
I'm
doing
systems,
administration
or
cloud
stuff
or
whatever
else.
I
I
try
and
revolve
around
powershell
and
automating
it.
I
love
automation,
I
love
making
things
run
faster.
I
love
making
it
so
that
I
don't
have
to
do
the
work
manually.
B
B
Happy
happy
to
explore
that
a
little
bit
further,
so,
let's
dive
into
track
gpo,
I'm
going
to
try
and
do
this
all
from
a
remote
shell
hopping
onto
a
domain
controller.
That's
on
my
local
network
as
much
as
possible.
I
try
not
to
remote
desktop
onto
any
domain
controllers.
I
hope
you
do
that
as
little
as
possible
too.
Using
powershell
and
automation
is
definitely
the
way
to
go
for
most
anything
so
trying
to
do
things
in
remote
terminals.
Remote
sessions
is
great
rdp
onto
dc
stream,
nice,
okay,
so
first
up
is
installing
the
module
track.
B
B
B
B
B
Okay,
I've
got
one
person,
at
least
maybe
two-
maybe
three.
I
think
it's
just
great
to
always
be
talking
about
how
we
can
use
the
shell
and
how
we
can
access
all
this
information
that
we
want.
So
I'm
going
to
focus
on
using
the
powershell
window
and
we're
going
to
say
if
I
want
to
get
the
command
from
a
module.
I
specify
that
I
want
to
look
up
commands
from
the
module
great
job.
Alan
kaplan
you're
right
on
the
money,
get
command
module,
track,
gpo
you're
good
to
go
in
this
case
track.
B
Gpo
only
has
one
command
and
it
basically
does
one
thing
hopefully
decently.
Well,
we'll
we'll
see
about
that,
and
that
command
is
invoke.
Gpo
tracking.
If
you
want
to
learn
about
how
invoke
gpo
tracking
can
be
used,
do
you
know
what
command
you
would
run?
For
that
raise
your
hand,
if
you
don't
know,
or
does
everyone
still
have
the
hand
raise.
B
B
If
I
was
not
in
a
remote
shell,
I
could
say
show
me
a
window,
but
because
I
am
remoted
onto
this
domain
controller.
If
I
try
and
do
anything
like
out
grid
view
or
show
window,
it's
just
going
to
say
hey.
I
can't
do
that.
Dave.
Sorry
in
the
case
of
this
we'll
just
get
to
look
through
it
here,
it's
decently
decently,
simple
to
use
this
module.
B
B
So,
let's
see
here,
where
am
I
my
line
for
me?
I
actually
started
writing
this
script
back
in
2018
and
started
using
it
as
a
little
way
to
make
my
auditors
happy.
I
work
for
a
bank
and
we
have
auditors
that
are
always
coming
and
asking
about
how
we
can
audit
how
we
can
make
sure
that
things
are
in
a
consistent
state
and
they
would
say
how
do
you
have
your
password
policy
configured
when
was
it
last
changed?
B
Show
it
to
me
in
your
group
policy
stuff
like
that,
and
we
and
I
kind
of
said
there
has
to
be
a
decent
way
for
me
to
say
here's
last
time
that
I
changed
to
the
password
policy
in
group
policy,
and
I
also
want
to
be
able
to
say
what
changed
from
last
time
to
what
it
currently
is.
So
I
started
writing
this
script
as
a
way
of
tracking
these
changes
kind
of
taking
snapshots
and
showing
the
diff
between
each
of
them.
B
So,
let's
start
with
this
right
here,
I'm
just
sitting
in
my
documents
folder
and
I'm
going
to
invoke
gpo
tracking
to
start
tracking
our
group
policy.
It
has
two
main
things
that
you
have
to
put
in
here.
You
can
see
that
everything
else
has
these
brackets,
showing
that
these
are
optional,
optional,
optional,
optional
parameters.
B
I
think
that
this
counts
as
optional.
Actually,
I
should
change
that
someone
put
in
a
issue
for
me
and
I'll
get
that
changed,
but
that's
what
we'll
start
out
with
here.
If
I
just
want
to
create
a
new
setup
and
track
group
policies
into
a
folder
called
gpo
store,
I
also
need
a
working
directory
that
will
allow
the
temporary
stuff
to
work.
I
created
it
this
way
so
that
anyone
who
has
secure
or
sensitive
information
in
their
group
policies
they
at
least
have
a
measure
of
control
over.
B
B
There
we
go
that's
what
I
was
hoping
for
the
first
time
so
by
default
and
just
to
be
sensitive
to
those
who
may
have
sensitive
information
in
their
group
policy.
It
will
not
do
anything
if
you
just
run
it
like
this
because
and
phil.
Can
you
read
this?
What
what
do
I
need
to
do
in
order
to
get
it
to
initialize,
because.
B
B
If
I
go
over
into
the
machine
and
I
look
in
that
gpo
store
folder
that
I
told
it
to
point
to,
we
can
see
that
it
just
created
a
whole
bunch
of
different
folders
and
you
may
say:
oh
what
is
this?
I
don't
understand.
Well,
on
the
machine
itself,
I've
created
11
group
policies
just
as
kind
of
a
sample
of
your
domain.
Something
like
this.
B
You
can
see
that
I've
got
the
default
domain
controller
default
domain
and
then
I
created
another
nine
policies,
real
quick,
that
lines
up
nicely
here.
We've
got
one
folder
per
policy
when
you
back
up
a
gpo
that
commandlet
creates
a
nice
random
guide
to
put
it
into
a
folder.
So
you
don't
have
to
worry
about
collisions,
but
within
each
one
of
them
it
has
a
nice
little
xml
file
that
has
all
the
details.
B
A
So
just
a
quick
question
there,
like
the
question,
was
like
you're
you're
exporting
all
that
stuff,
so
you're
exporting
both
the
html
report
and
the
the
x
the
xml
version
of
the
report
exactly
so
you're.
My
am
I
guessing
I'm
probably
getting
ahead
of
your
myself
here
or
yourself.
Is
that
you're
going
to
do
the
xml
so
that
you
can
parse
it
or
you
can
do
some
work
with
it
or.
B
Actually,
I
I
don't
work
with
xml
at
all.
That
is
strictly
for
when
you
need
to
manage
and
restore
your
backups
okay,
because
when
we
have
a
backup
of
something
group,
policy
itself
will
only
work
from
the
xml
files.
So,
in
order
to
go
back
to
a
previous
version
or
to
restore
a
deleted
one,
we
need
the
xml
all
of
my
comparison,
stuff
just
uses.
Actually
the
html.
B
B
B
B
Great
I've
now
made
that
change
the
allow
online
tips
setting
is
configured
and
it's
set
to
disable.
No
one
is
allowed
to
and
we're
going
to
do
the
same
thing
over
here
that
we
wanted
to
do
originally
with
hey,
get
what
we're
doing
and
take
a
snapshot
of
the
group
policy
and
show
me
differences
between
it.
So
here
on
the
domain
controller,
if
I
press
n
key,
thank
you
now,
because
we've
already
initialized
the
setup,
I
don't
need
to
run
that
again.
B
I
actually
never
need
to
run
that
again,
which
means
that
if
something
happens,
if
I
fat
finger
it
because
I'm
just
randomly
doing
things
or
if
something
happened,
where
I
ran
it
from
a
completely
different
folder,
it's
going
to
go
back
to
giving
me
that
error
about
being
angry,
not
being
initialized.
So
typically,
you
do
the
initialize
for
the
first
run,
and
then
you
never
add
it
again,
just
to
make
sure
that
it's
not
having
any
unexpected
there.
B
It
would
override
some
of
the
controls
that
are
in
place.
It
would
be
extra
helpful,
unfortunately,
so
I
would
definitely
recommend
don't
keep
including
it
because,
like
I
said,
if
you
are
in
a
different
folder
or
if
you
fat
finger,
something
it'll
go:
oh
okay,
I
need
to
initialize
it'll
create
folders
and
it'll
just
run
along
happily
doing
whatever
you
just
told
it
to
do.
B
Welcome
to
submit
it
I'll
look
it
over.
So
I
just
ran
that,
and
we
can
see
that
over
here
in
the
folder
now
there's
something
new.
All
of
these
were
created
at
645..
There's
one
new
one
listed
here
and
if
we
come
back
over
to
our
manage
backups
and
we
look
at
the
timestamps
on
it,
we
can
see
that
there's
another
one
for
bpo1,
so
it
really
did
take
a
backup
of
just
that
one,
because
all
the
other
ones
were
the
same.
That's
its
goal
is
not
to
flood
you
with
backups.
B
B
What
I
found
is
that
html
sometimes
gets
a
little
crazy
and-
and
it
was
a
challenge
where
these
things
htmls
aren't
the
same.
If
you
generate
it
twice,
they
won't
be
the
exact
same
necessarily,
and
I
wanted
to
kind
of
distill
it
down
into
something
that
would
be
consistent,
something
that
I
could
do
a
comparison
off
of
so
I
actually
created
a
stripped-down
version
of
html
of
html,
a
stripped-down
version
of
the
html
file
and
just
put
it
into
something
like
this.
I
know
that's
small
I'll,
make
it
bigger
for
you.
B
A
B
A
B
B
B
B
I
released
a
helper
module
that
works
with
the
external
capabilities
on
this,
and
it's
called
track.
Gpo
smtp.
This
is
the
track.
Gpo
command
will
go
and
search
for
anything
that
provides
this
certain
command
name
which
I'll
get
to
later
in
the
presentation,
and
it
will
go
and
pass
all
the
information
about
group
policy
changes,
additions,
deletions
and
let
it
do
whatever
external
stuff
is
needed
with
it
before
it
continues
on.
So
first
we'll
install
the
module.
B
I'm
sorry,
I
gotta
stop
here
for
a
second
I've
got
someone
even
clever.
Oh
thank
you
very
nice
greg
allen.
Where
is
the
remove
html
content
function?
I
can
show
you
that
here,
let's
talk
about
it
in
track,
gpo
in
gitlab.
It's
just
in
my
source
functions,
it's
a
private
function
and
this
is
called
remove.
Html
content,
here's
the
repo
thanks
bill.
B
Yeah,
you
can
look
on
your
own
machine,
so
this
is
in
the
track.
Gpo
repository
in
the
source
folder
in
the
private
functions,
and
it's
just
called
remove
html
content
that
I
stole
from
wins
winston
facet.
I
don't
know
who
that
is.
I
just
found
a
nice
little
html
one,
but
I
did
have
to
make
some
changes
to
it.
So
it's
not
the
exact
same
thing.
B
Back
to
this,
so
I've
installed
this
external
helper
module
and
if
we
do
the
same
thing
of
get
command
module,
smtp
we're
going
to
see
that
it
has
a
couple
external
commands
that
are
available
and
the
new
track.
Gpo
ticket
and
error
are
the
ones
they
get
called
from
track.
Gpo
the
new
track,
gpo
smtp
config,
is
something
that
you
would
do
before
you
invoke
the
gpo
tracking
so
that
it
knows
how
to
reach
out
how
to
get
a
hold
of
you
for
something,
and
I
will
showcase
that
here.
B
So
the
track
qpo
smtp
config
is
pretty
simple:
smtp
server,
smtp
port
who's
it
from
who's
it
to
whether
or
not
to
use
ssl,
and
if
you
need
to
provide
a
credential,
something
like
that,
if
you've
done
anything
with
smtp
on-prem
using
like
microsoft,
iis6,
you
may
or
may
not
have
credentials
needed.
You
may
just
have
a
relay.
That's
accessible
on
your
domain.
B
Same
thing
works
here!
You
just
don't
need
to
put
in
the
ssl.
You
don't
need
to
put
in
the
credential.
So
it's
it's
pretty
flexible
for
anyone,
hopefully,
and
when
you
create
that
it
gives
you
a
nice
little
object
here,
you
don't
need
to
do
anything.
It's
just
showing
you
what
it
created
and
you're
done,
you're
ready
to
go
back
to
tracking
gpos.
B
B
For
me,
I
have
it
running
three
times
a
day.
I
do
just
before
the
work
day
starts
in
the
middle
of
the
work
day
and
just
before
the
work
day
ends.
I
I
find
that
makes
it
easy
for
me
to
get
notified
of
things
before
they
can
cause
problems
as
well
as
while
they're
still
fresh.
On
my
mind,
I
also
I
don't
even
do
most
of
the
crew
policy
stuff
anymore.
Some
of
my
junior
admins
do
that.
B
B
B
If
I
come
and
look
at
it,
I
can
see
exactly
what
happened.
I
can
see
what
the
group
policy
name
is.
I
can
see
when
it
was
last
modified
and
that's
based
on
what
active
directory
lists.
I
can
see
the
summary
of
changes,
so
this
actually
shows
the
the
changes
on
that
html
report.
I
can
see
that
it's
gone
from
revision2
to
revision3
and
then
down
here
at
the
bottom.
I
can
see
exactly
what
changed
somebody
added
a
settings,
page
visibility
and
they
set
it
to
disabled.
B
A
B
I
see
it's
a
it's
a
mind.
Blown
not
a
hand
raise
okay,
let's
see
here
that
check
check
check.
So,
let's
move
on
to
the
next
thing
and
let's
showcase
adding
some
group
policies
we're
done
with
this.
We
add
group
policies
all
the
time
phil.
What's
a
great
name
for
group
policy,
what
should
we
name
this.
B
B
B
A
B
One:
okay:
let's
get
rid
of
number
one,
so
this
is
pretty
typical
stuff
in
in
the
day-to-day
world.
You're
adding
group
policies,
you're
deleting
group
policies
and
we're
just
going
to
come
along
here
and
we've
got
our
automated
script.
That
runs
new
tracking
gpo
smtp
config,
and
then
it
runs
again.
The
same
thing
of
invoke
gpo
tracking.
B
B
B
It
exactly
it
would
just
give
you
this
and
it
wouldn't
do
anything
else
at
all.
Is
that
a
good
idea?
Well,
that's
a
great
question.
I
I
like
that
feature
from
the
google.
What's
the
cloud
domain
sync.
Is
that
what
they
call
it
these
days?
It
has
this
sort
of
a
same
default
where
it
won't
process
if
it
had
a
significant
chunk
change.
B
B
A
A
I
I
think
I
like
this
because
it
rather
than
being
inundated
with
oh
my
gosh.
These
are
all
the
things
that
have
been
added
or
deleted.
It's
telling
you
hey:
we've
we've
got
a
threshold,
that's
been
exceeded
for
the
additions
or
deletions
and
you're
not
being
in
and
trying
to
winnow
out
what
those
details
are.
B
A
B
For
bringing
that
up,
so
in
this
case
I
actually
just
ran
it
three
times
here
and
every
time
it
gave
me
the
same
error
too
many
added
or
removed
group
policies
and
actually
over
here,
because
we
have
smtp
set
up.
I
now
have
three
emails:
saying:
hey,
there's
an
error,
guess
what
it
says
same
thing
here
or
I
I
don't
have
any
sound
sorry
chris
greg
lyons.
Does
this
answer
your
question?
B
B
I
also
have
seen
people
say
that
agpm
only
works
if
people
only
use
it
and
they
can
still
get
around
and
just
hit
the
group
policy
themselves.
I
honestly
don't
know
that
much
about
it.
This
was
bred
out
of
a
need
for
monitoring
and
making
auditors
happy,
and
I
just
used
powershell,
because
that
was
the
easiest
thing
still
is.
Make
sense:
choose
your
own
adventure.
B
David
stein
says
he
just
did
an
agpm
rollout
and
he
agrees
with
me
that
I
don't
know
what
he's
agreeing
with,
but
cool
we
will
hopefully
get
to
the
diff
class.
A
gpm
is
gross
okay,
let's
move
on
here.
How
do
we
resolve
this?
Well,
we
can
either
figure
out
what's
going
on.
Why
are
there
so
many
changes
or
we
can
increase
that
number
to
make
it
work?
B
In
my
experience,
or
at
least
for
my
company
10
is
great
because
if
I'm
running
it
three
times
a
day,
I
never
have
an
organic
amount
of
change
that
hits.
Ten
percent
of
our
group
policy
objects
within
a
four-hour
window.
That's
just
what
I
picked,
but
hey
you're,
the
sysadmin.
You
can
pick
whatever.
Whatever
number
you
want
so
over
here
I'll
just
say:
let's
change
the
remove
the
remove
percent
max
delta
up
to
20.
B
And
we'll
let
it
go
and
run
it
delete
some
stuff.
It
creates
some
stuff
we
should
see
over
here.
If
we
look
that
it
just
made
a
nice
little
change
and
then
we
should
also
be
able
to
come
over
to
the
email
and
see
some
changes.
That's
our
expectation
right
tada
I
just
got
two
emails.
Gpo
has
been
removed
from
my
domain,
hey
look
phil!
You
picked
this.
You
picked
gp01,
it's
gone.
B
It
doesn't
have
all
the
details
of
the
group
policy
in
here.
I
kind
of
went
back
and
forth
on
that.
I
just
felt
like
when
you're
adding
a
group
policy
just
getting
a
capture
of
the
first
date
and
saying
yeah,
you've
got
the
thing
is
good
enough,
but
then
showing
it
from
any
time
that
you
have
the
changes
being
able
to
see
here's
what
change
between
it
seems
to
work
pretty
well.
B
So
that's
just
what
I
have
can
the
person
who
made
the
change
be
added
to
the
email
notification
right
here
if
I
come
to
this
with
the
smtp
config
no
by
default,
but
because
this
is
just
calling
an
external,
let
me
bring
that
up
here.
Get
a
command
from
here,
because
track
gpo
will
go
and
call
the
new
track.
Gpo
ticket
external
command.
You
can
write
your
own
function
or
your
own
module.
That
does
anything
that
you
want
to.
B
It
will
get
past
the
information,
and
then
you
can
say:
okay,
here's
who
to
send
it
to.
Unfortunately,
because
this
is
snapshots,
it
doesn't
know
who
did
it
unless
there's
some
other
way
that
I'm
unaware
of,
but
I
would
say
that
no,
this
does
not
know
who
did
it.
It
only
knows
that
something
was
done.
B
Okay,
no
questions,
then,
can
you
restore
that
policy?
Yes,
I
would
be
happy
to
thank
you
manage
backups.
I
can
see
that
gp01
is
sitting
right
here.
I
might
want
to
just
pick
show
me
only
the
latest
so
that
I'm
not
accidentally
using
the
original
gpu
one.
Maybe
I
want
the
latest
one
only,
and
I
can
see
that
that
one
is
right
here.
B
B
B
B
Perry,
I
don't
yeah
that
seems
right,
david
stein,
if
you
enable
auditing
the
event,
log
will
show
who
modified,
but
it
might
require
event
forwarding
yeah,
so
you'd
have
to
go
and
do
something
yourself
where
you
go
and
pull
from
potential.
Would
it
just
be
the
primary
domain
controller
that
you'd
have
to
do,
or
would
you
hit
all
domain
controllers?
B
B
B
B
B
Okay,
we'll
we'll
dig
a
little
bit
deeper.
You've
you've
got
a
pretty
good
sense.
I
hope
of
what
it
would
take
to
get
this
up
and
running
in
your
environment,
install
the
module,
install
the
helper
module
if
you
like,
smtp
and
run
it
with
initialize
and
then
just
run
it
run.
It
run
it.
However
often
you
like,
if
you
want
to
do
once
a
day
or
10
times
a
day,
it
really
shouldn't
matter
too
much,
but
it
does
have
a
lot
of
extra
features.
B
So
we
have
this
little
switch
parameter
here
called
skip
common
changes
and
what
that'll
do
is
over
here,
where
normally
we
have
like
the
revision
change
information,
it's
something
that
people
don't
really
care
about,
or
at
least
I
don't
always
care
about
seeing.
So
this
will
just
remove
that
extra
little
bit
of
common
information
off
of
there
and
then
the
other
option
you
have
that's
related
to
it
is
the
gpo
change
context,
which
is
how
much
information
about
or
how
much
information
around
this
change
is
displayed
by
default.
B
It
will
show
three
lines
above
and
three
lines
below,
and
we
can
see
the
same
thing
down
here
with
the
actual
change
that
I
made
three
lines
above
and
three
lines
below.
While
it
hits
the
end
with
the
gpo
change
context
option
I
can
set
that
to
be
as
little
as
I
want,
or
I
can
set
it
to
be
really
big.
Let
me
showcase
that
here
with
zero.
I
gotta
go
make
another
change.
B
So,
let's
edit
this
change
the
world
policy
and
just
something
else:
let's
try
printers
this
time,
activate
internet
printing.
That
seems
really
good.
Let's
activate
internet
printing,
okay,
so
that's
now
active
in
my
domain
and
I've
got
skip
common
changes
and
gpo
change
context,
added
and
I'll
just
go
ahead
and
let
that
run
and
we'll
see
the
same
thing
hopefully
come
through
of
it
did
detect
something.
And
then,
if
I
come
over
to
my
email
and
look,
there's
been
a
gpo
change.
Awesome,
and
I
can
see
here
are
the
details
of
what
happened.
B
B
This
is
over
here
of
computer
configuration
policies,
administrative
templates,
printers,
activate
internet
printing
internet
print.
Everyone
gets
a
print
job.
Thank
you,
phil,
so
very,
very
similar
between
what
you
see
in
the
email
and
what
the
actual
change
looks
like
in
this
html
report,
because
I
set
the
gpo
context
option
to
zero,
there's
no
additional
context
above
or
below.
If
I
set
that
to
a
really
large
number,
I
could
see
a
lot
of
information
all
around
this
area
in
that
policy.
B
B
I
can
look
at
each
of
the
times
that
it
makes
any
change
just
like
I
can
with
any
other,
get
repo
and
see
exactly
what
was
happening.
Add
this
remove
this
change
this
I
can
manipulate
it
if
I
need
to
reset
going
forward
or
backward
with
the
the
current
working
directory
on
it.
So
if
you
have
experience
working
with
git,
then
this
will
feel
very
normal
to
you.
B
Look
at
the
status,
it
also
shows
a
couple
other
things
that
are
listed
here.
These
are
untracked
files
because
we
pre
previously
were
tracking
them,
but
no
longer
are
so.
This
is
stuff
that
gets
deleted.
We
had
a
bunch
of
different
versions
of
the
gp01
and
then
we
deleted
gp01,
and
we
told
it
we
no
longer
want
any
of
these
showing
up
here
within
the
git
repo
that
doesn't
change
anything
if
you're
just
looking
at
this
file
view.
B
B
Not
seeing
any
new
questions
in
chat,
okay,
we'll
keep
going
then,
because
this
is
a
regular
git
repo.
You
can
add
on
to
it
and
say
you
know
what
after
I
run
this
every
time,
I'm
going
to
go
ahead
and
run
a
get
push.
Obviously
I
just
created
a
repo.
I
didn't
set
up
anything
so
it
doesn't
have
anywhere
to
push
to.
But
if
you
needed
to
have
all
of
your
group
policies
get
backed
up
to
say
your
enterprise
get
client,
on-prem
or
even
an
cloud
provider.
B
B
A
gpo
without
git
how
about
that?
So
I
want
to
disable
the
git
repo.
I
want
to
get
a
snapshot
of
everything.
What
we
expect
is
that
it'll
get
mad
at
you
saying
this
is
not
a
thing.
You
need
to
initialize
everything.
You'd
want
right.
This
is
a
different
folder
name.
It
doesn't
already
exist.
You
need
to
initialize.
Okay,
I'm
going
to
run
this
again
with
the
initialize
just
this
first
time
to
get
it
created.
B
B
B
Then.
Oh
one,
other
scenario
that
you
could
do
if
say
you
wanted
to
just
have
a
snapshot,
but
then
you
wanted
to
use
your
internal
backup
agent
to
deal
with
getting
it
to
a
cloud
or
something
else
you
could
say.
I
would
just
want
an
exact
mirror
of
what
my
group
policy
stuff
looks
like
sitting
in
this
folder
get
is
a
dependency,
a
hundred
percent
of
the
time,
alan
because
it
relies
on
get
diff
in
order
to
compare
the
information
between
the
things,
so
you
always
have
to
have
git
in
order
to
use
this
module.
B
A
B
B
B
B
Okay,
internet
printing
is
disabled
and
I'm
going
to
add
the
verbose
option
here.
You'll
get
to
see
exactly
what
it
does.
Hopefully
this
all
fits
on
screen.
Oh
I'm,
in
the
way.
That's
okay!
There
we
go
so
right
here
you
can
see
all
the
different
things
that
it's
doing
remove
items.
Comparing
policy
found
12
items
comparing
12
items.
B
It
is
comparing
the
goods
reconciling
changes.
It
found
right
here
removing
the
previous
version
of
this,
which
shows
me
exactly
what
was
deleted.
If
I
ever
need
to
go
and
use
it
and
then
all
the
other
ones
it
didn't
do
anything
with,
and
if
I
come
back
over
to
the
explorer
to
look
at
it,
I
can
see
that
there
are
still
12
folders
exactly
in
here.
B
So
it
is
a
perfect
one
to
one
mirror
of
what
is
in
my
group
policy
sitting
in
this
folder
and
if
someone's
going
to
ask
about
email
yep,
we
got
the
email
right
here
as
well.
Saying:
hey,
look
something
changed,
we
take
a
look
at
it
and
we
can
see
it
was
the
change
the
world
policy
that
changed.
We
can
see
exactly
when
it
was
modified
at
according
to
active
directory,
and
we
can
see
the
activate
internet
printing
was
removed
of
enabled
and
we've
added
it
set
to
disabled.
B
B
Here
it
is,
I
found
it-
hopefully,
that's
still
readable
for
everyone,
so
this
just
uses
a
regular
get
diff
and
I
have
it
removing
a
bunch
of
extra
information
just
to
give
me
the
exact
level
that
I
wanted.
So
it's
got
some
stats
in
it.
It
doesn't
include
information
about
the
index
and
I
don't
remember
all
these
switches.
I
have
to
look
it
up
every
time.
I
do
it.
B
Let's
see
greg
feature,
request
to
add
a
text
file
with
the
human
readable
name
in
the
subfolder,
so
you
mean
something
different
than
the
existing
summary,
because
this
is
listed
as
a
dot
summary
file
instead
of
a
dot
text
button.
Is
that
all
you're
saying
so
you
would
just
love
for
it
to
be
text
instead
of
dot.
Summary
okay
submit
a
feature
request,
we'll
think
about
it.
B
B
B
This
is
it
when
gpo
tracking
runs,
it
will
look
for
a
command
called
new
track,
gpo
ticket
external-
if
it
finds
one,
it
will
run
it
and
it'll
send
over
four
parameters,
always
at
least
two
the
type
and
the
gpo
info.
And
then,
if
it's
a
change,
it'll
also
include
the
diff
and
some
stats
about
it.
So
you
can
come
in
here
and
you
can
put
anything
that
you
want
to
into
your
function
of
what
you
want
to
do,
and
you
can
also
put
in
information
anything
that
this
function
returns
to
track.
B
Gpo
will
get
saved
as
the
commit
message
in
the
get
repo
itself.
So
if
you
want
to
put
in
your
own
customer
that
you
know
add
or
remove
or
change
gpo
event,
something
like
that,
that's
going
to
now
be
the
git
commit
messages
for
the
moment,
we'll
just
change
it
to
be
like
this.
So,
instead
of
sending
me
emails
now,
I'm
just
going
to
have
it
spit
out
the
gpo
info.
B
B
Yeah
so
track
gpo
air
external,
and
you
can
also
see
that,
because
I
created
my
own
function
for
the
ticket,
it's
now
going
to
not
do
the
email.
If
I
come
and
look
at
my
email,
there's
not
any
new
email
after
running
that,
so
I
will
only
get
emailed
if
there's
an
error.
If,
if
there's
no
errors,
then
it's
just
adding
removing
changing
group
policy
objects,
then
it'll
run
whatever
custom
code
that
I
put
in.
B
B
Alan
says:
can
this
be
installed
on
and
run
from
a
domain
server,
not
a
domain
controller?
Absolutely
I
actually
have
this
running
on
a
member
server,
not
on
a
domain
controller.
I
don't
run
anything
on
my
domain
controllers
just
here
in
my
home
lab.
I
only
have
a
domain
controller
that
I
spun
up
for
this,
and
so
it
just
sits
by
itself.
B
B
B
B
B
I
wanted
to
work
on
those
instead
of
just
as
a
big
string
or
a
big
array
of
strings,
I
wanted
to
work
on
it
as
more
of
a
native
data
type,
so
I
just
created
a
queue
generic
class,
which
is
something
that
I
can
just
add
to
put
things
into
the
queue.
So
I
take
the
entire
diff
going
into
it
and
create
that
cue,
and
then
I
pull
out
from
it
one
line
at
a
time
and
I
parse
out
what
it
is.
B
So
I'm
going
to
first
be
looking
for
the
header
stuff
and
pulling
that
out
until
I
get
to
the
first
part,
and
I
think
that
it's
easiest
to
visualize
it
here.
So
I
just
take
the
whole
diff
here
and
that's
what
goes
into
that
generic
collections
queue
item,
and
then
I
I
remove
all
the
headers.
So
you
don't
even
see
those
on
the
final
output
here,
but
then
on
this
hunk.
B
B
Yeah,
so
it
comes
in
an
array.
I
just
take
the
diff
as
an
array
and
I
create
the
q
and
then
I
read
it
from
the
top
down
one
line
at
a
time
using
the
queue
and
that's
what
peak
is
with
that
method?
That's
yeah,
so
peak
is
look
at
the
first
one.
Dq
is
take
the
first
one
off
of
that
stack
so
that
now
next
time
I
run.
A
B
B
In
that
generic
collection,
it's
really
fun
being
able
to
do
that
more
classical
programming
related
stuff.
I
I'm
not
a
programmer.
I
tried
going
into
computer
science
and
it
was
not
for
me.
My
brain
is
just
not
abstract
enough
to
to
handle
that,
but
the
powershell
capabilities
are
right
around
perfect.
For
me,
I
can
understand
what
powershell
does.
A
B
David
stein,
smtp
module.
Are
you
looking
at
an
alternative
for
send
mail
message?
Yeah?
I
I
haven't
really
given
it
too
much
thought,
because
you
have
the
capability
of
writing
your
own
modules.
You
can
publish
your
own
module.
That
does
something
better
than
smt
than
a
send
mail
message
and
that'll.
Happily
work
with
this
code.
Just
fine!
All
you
need
to
be
able
to
do
is
take
those
four
parameters
that
are
listed
just
like
what
I
was
showing
with
the
function
here.
B
A
B
A
Well,
I'll
certainly
be
playing
with
it.
You
know
more,
I
downloaded
it
before,
but
now
I'm
actually
gonna.
You
know
truly
use
it,
because
I
looked
at
the
code
first,
I'm
like
I
kind
of
see
what
you're
doing,
but
I'm
not
sure
what
you're
doing
and
now
that
I've
seen
it
in
action.
I'm
like
okay,
I
understand
better.
So
this.
A
Oh,
this
is
so
again
thanks
everybody
for
for
joining
us
and
devin.
You
know,
I
think
you
definitely
hit
it
at
the
park.
There's
some.
You
know
you've
gotten
a
lot
of
great
feedback
in
chat
and
you've
been
doing
a
great
job,
responding
to
feedback,
and
I
certainly
think
a
lot
of
people
are
highly
impressed
with
what
you've
come
up
with,
and
you
know
did
a
great
job
and
thanks
so
much
for
for
joining
us
yeah.
Thank
you
yeah
and
then
for
the
youtube
crowd.