How to know the list of GPO CSEs available in computer

While working on GPOs related stuff, initially I struggled to find a way to know list of GPOs available in my machine. After a bit of research I found that list will be available at registry location “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions”. I am satisfied and started looking at this location whenever I want to know CSE settings. But a bit later, I found this procedure also little bit difficult and finally relied on my favorite to get this information for me.  Below are the examples,

To list all CSEs installed in my machine alone with their GUID, use below one liner.

PS C:> Get-ItemProperty “HKLM:SOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions*” | ft “(default)”, PSChildName

And the output of above command will be something like this…

To list the properties of a given CSE(say drive mappings), use the below one liner.

PS C:> Get-ItemProperty “HKLM:SOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions*” | where {“$_.(default)” -like “*drive*”}

Similarly, to list the Internet Explorer Branding CSE related settings, use the below one.

PS C:> Get-ItemProperty “HKLM:SOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions*” | where {“$_.(default)” -like “*Internet Explorer Branding*”}

Similarly, you can play with remaining options if you have some PS knowledge. Let me know if can not make out any particular thing.

Happy Learning..,
Sitaram Pamarthi