Skip to main content
Version: 2.3.0

AD-GPOS-05 - Computer disabled GPO settings details should be compliant

Michael Soule
Contributed by Michael SouleAll contributors →

Overview​

Test-MtAdGpoComputerSettingsDisabledDetails​

Returns details of GPOs where computer settings are disabled.

Why This Test Matters​

  • Detective control: lists GPOs where computer settings are disabled which can affect machine-level policy delivery.

Control Type​

Operational

Security Recommendation​

  • Review computer-disabled GPOs and confirm they are intentional.

How the Test Works​

  • Analyzes GPO state to extract GpoStatus ComputerDisabled details and renders a detailed table.
  • Test-MtAdGpoComputerSettingsDisabledDetails.

Test Metadata​

FieldValue
Test IDAD-GPOS-05
SeverityInfo
SuiteActive Directory
CategoryAD.GPOState
PowerShell testTest-MtAdGpoComputerSettingsDisabledDetails
TagsAD, AD-GPOS-05, AD.GPOState

Source​

  • Pester test: tests/ad/gpostate/Test-MtAdGpoComputerSettingsDisabledDetails.Tests.ps1
  • PowerShell source: powershell/public/ad/gpostate/Test-MtAdGpoComputerSettingsDisabledDetails.ps1