Nuking orphaned GPOs in the SYSVOL

gpo-cleanup.ps1

# Nuking orphaned GPOs in the SYSVOL
Start-Transcript .\gpo-cleanup.log

$guids = (get-gpo -All).id.guid
$files = (ls .).name

Write-Host 'Registered GPOs:' $guids.count
Write-Host 'GPO Files:' ($files | Select-String '{').count

$extraFiles = @()
foreach($i in $files) {
	if($i -notmatch '{') {
		continue
	}
	$fileGuid = $i.Substring(1, $i.Length - 2).ToLower()
	if(!($guids.ToLower() -contains $fileGuid)) {
		Write-Host 'Missing GPO' $fileGuid 'for folder' $i
		$extraFiles += $i
	}
}

if($extraFiles.count -gt 0) {
	Write-Host 'Moving all orphaned GPO files'
    mkdir .\orphans
	foreach($i in $extraFiles) {
		mv $i .\orphans\$i
	}
}

Stop-Transcript