> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/gpo-audit/gpo-comparison.md).

# GPO Comparison

The GPO Comparison feature allows users to compare and analyze the settings applied by Group Policy Objects in the Active Directory against both custom and official baselines prepared by Microsoft, CIS, STIG, and Forestall. These baselines are created by considering the security best practices.

Input fields are ;

**GPO**: List of the Group Policy Objects in the selected scan that have readable policy settings.

**Baseline**: List of the enabled baselines: custom baselines first, then the Forestall baselines, then the other predefined baselines. Each baseline is listed as `<Type> - <Name> (<Version>)`. A disabled baseline (see [Custom Baselines](/forestall/gpo-audit/custom-baselines.md)) is not offered.

After you select the GPO and the baseline, the page automatically compares the applied settings and displays the results.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-174d60d7d46acdb1ff59d64c5a1a3e48de2ba54f%2Fgpo-audit-gpo-comparison.png?alt=media" alt="Group Policy Comparison with a GPO and a baseline selected"><figcaption><p>GPO Baseline Comparison</p></figcaption></figure>

## **Comparison Result**

The colored badges under the **Comparison Result** label in the upper-right show the number of settings in each category. The category name appears as a tooltip when hovering over a badge.

Clicking on these badges allows you to filter the result table.

Colors of the badges are categorized as;

|                                                                                                                                                    Color                                                                                                                                                    |      Definition      |
| :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: | :------------------: |
|                       ![gpo\_baseline\_comparison\_uncompatible\_colour](https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-a6f30d0d9dff98e3d7f9c06e636248d6ae32f152%2Fscan_list_colour_1.png?alt=media)                      |     Uncompatible     |
|        ![gpo\_baseline\_comparison\_not\_configured\_colour](https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-6a7e0bc2a4eee0a36a72c2ace8634e0189bc52f2%2Fgpo_baseline_comparison_not_configured_colour.png?alt=media)       |    Not configured    |
| ![gpo\_baseline\_comparison\_baseline\_not\_defined\_colour](https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-dd833eb5c1cfa41e7c000d694eec21d1869eea7e%2Fgpo_baseline_comparison_baseline_not_defined_colour.png?alt=media) | Baseline not defined |
|            ![gpo\_baseline\_comparison\_compatible\_colour](https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-86473ec5ef459f57a3669ee43b1f3ae1e8cd3de3%2Fgpo_baseline_comparison_compatible_colour.png?alt=media)            |      Compatible      |
|                   ![gpo\_baseline\_comparison\_all\_colour](https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-c836648dd93f7093df7bc9b26832753b59bd594e%2Fgpo_baseline_comparison_all_colour.png?alt=media)                   |          All         |

**Uncompatible**: The setting configured by the GPO is not secure according to the baseline (the UI label for *incompatible*).

**Not configured**: The setting referenced by the baseline is not defined or not configured by the GPO.

**Baseline not defined**: The setting configured by the GPO is not included in the baseline.

**Compatible**: The setting configured by the GPO is secure according to the baseline.

**All**: All settings that are configured by the GPO or referenced by the baseline.

The widgets in the upper-right side of the table allow us to;

* **Search**: Search the comparison results across all table columns.
* **Export**: Export the comparison results and the respective information listed in this table as a CSV file.

The **Results** table contains information about the results of the Group Policy Object settings comparison,

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-2ce39eca607e0fa4212803cb05ecf0e0a4c89844%2Fgpo-audit-gpo-comparison-image-1.png?alt=media" alt="Results table of the comparison"><figcaption><p>GPO Baseline Comparison Result</p></figcaption></figure>

**Status**: Comparison result for the GPO setting.

**Type**: Type of the setting.

**Policy Group or Registry Key**: Group policy configuration path of the setting.

**Setting**: Name of the settings.

**GPO**: Value of the setting configured by the GPO.

**Baseline**: Value of the setting defined by the baseline.

In addition, each setting name is a link. Clicking it opens a window with the description of the setting and, where available, its **Info**, **Solution** and **Reference** sections.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-91b41dd53c97c147d9b527f353fa1cd66a57a993%2Fgpo-audit-gpo-comparison-setting.png?alt=media" alt="Setting window with the description and Info section"><figcaption><p>GPO Baseline Setting Definition</p></figcaption></figure>

{% hint style="info" %}
If the comparison returns no settings, the page shows **Compare details not found!** Check the selected GPO and baseline.
{% endhint %}