Skip to main content
Version: 3.0.0-preview

AD-GPOREP-15 - No GPOs should have version mismatches

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoVersionMismatchCount​

Counts the number of GPOs with a version mismatch.

Why This Test Matters​

  • Detective control: flags GPOs that have a version mismatch which could affect policy consistency across machines.

Control Type​

Detective

Security Recommendation​

  • Review mismatched GPOs and align versions with baseline configurations.

How the Test Works​

  • Pulls GPO state, filters HasVersionMismatch, counts total/mismatched and computes a mismatch ratio.
  • Test-MtAdGpoVersionMismatchDetails.

Test Metadata​

FieldValue
Test IDAD-GPOREP-15
SeverityHigh
SuiteActive Directory
CategoryActive Directory - GPO State
PowerShell testTest-MtAdGpoVersionMismatchCount
ServicesActiveDirectory
TagsAD, AD-GPOREP-15, AD.GPOState

Source​