asked on

resultant set of policy active directory

where I work we have an active directory environment. I have to troubleshoot problems, and have some administrative rights, but when I tried to run resultant set of policy for a user I got an access denied error.
I just want to see the group policy settings for this user, I definitely don't want to change a group policy. I worked somewhere before my current job and was able to change group policy and it was a hassle, and that was for a smaller company, so I have an appreciation for group policy pit falls.
so is there a way to just view group policy settings but not make changes? I want to request that level of access but I don't know if it exists.

ASKER CERTIFIED SOLUTION

Tony J

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

JeffBeall

ASKER

that works great Tony1044, and if I use it with psexec, I can get the results on a remote machine.
but the computer I'm trying to get group policies on is a winXP box, I tried

gpresult /S computername /U username /H pathtohtmlfile

but it has this error

"ERROR: Invalid Syntax. Options /U, /P, /R, /V, /Z cannot be specified along with
/X, /H."

if I use psexec on the winXP box it says gpresult is not a valid command
but if I use psexec on a win7 box it works great

Tony J

That's odd. I thought it was a valid command on xp but it doesn't support the /H

JeffBeall

ASKER

I'm sorry, you still have the right idea, it works in XP if I redirect the output to a file

gpresult > C:\drivers\test\result.html

this command worked!
Thank you for the help

JeffBeall

ASKER

I should have added, for XP the results aren't in a nice html format, so a .txt file works fine and I just open it in word or something like that, and it is readable.