Skip to main content
Version: 3.0.0-preview

AD-GPOREP-15 - No GPOs should have version mismatches

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoVersionMismatchCount​

Counts the number of GPOs with a version mismatch.

Why This Test Matters​

  • Detective control: flags GPOs that have a version mismatch which could affect policy consistency across machines.

Control Type​

Detective

Security Recommendation​

  • Review mismatched GPOs and align versions with baseline configurations.

How the Test Works​

  • Pulls GPO state, filters HasVersionMismatch, counts total/mismatched and computes a mismatch ratio.
  • Test-MtAdGpoVersionMismatchDetails.

Test Metadata​

FieldValue
Test IDAD-GPOREP-15
SeverityMedium
SuiteActive Directory
ProductActive Directory
FeatureGroup Policy
AreaInfrastructure hardening
Resource typeGroupPolicy
User impactLow
Implementation costMedium
MITRE ATT&CKNone
PowerShell testTest-MtAdGpoVersionMismatchCount
ServicesActiveDirectory

Source​