Solved

resultant set of policy active directory

Posted on 2013-05-15
5
712 Views
Last Modified: 2013-05-15
where I work we have an active directory environment. I have to troubleshoot problems, and have some administrative rights, but when I tried to run resultant set of policy for a user I got an access denied error.
I just want to see the group policy settings for this user, I definitely don't want to change a group policy. I worked somewhere before my current job and was able to change group policy and it was a hassle, and that was for a smaller company, so I have an appreciation for group policy pit falls.
so is there a way to just view group policy settings but not make changes? I want to request that level of access but I don't know if it exists.
0
Comment
Question by:JeffBeall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 25

Accepted Solution

by:
Tony Johncock earned 500 total points
ID: 39168213
Are you running RSOP.MSC? If so it's been deprecated and providing you have read access to the policies you should be able to run gpresult

Try gpresult /h gpresult.html (from cmd) and open the generated html file
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 39168444
that works great Tony1044, and if I use it with psexec, I can get the results on a remote machine.
but the computer I'm trying to get group policies on is a winXP box, I tried

gpresult /S computername /U username /H pathtohtmlfile

but it has this error

"ERROR: Invalid Syntax. Options /U, /P, /R, /V, /Z cannot be specified along with
 /X, /H."

if I use psexec on the winXP box it says gpresult is not a valid command
but if I use psexec on a win7 box it works great
0
 
LVL 25

Expert Comment

by:Tony Johncock
ID: 39168647
That's odd. I thought it was a valid command on xp but it doesn't support the /H
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 39168865
I'm sorry, you still have the right idea, it works in XP if I redirect the output to a file

gpresult > C:\drivers\test\result.html

this command worked!
Thank you for the help
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 39168871
I should have added, for XP the results aren't in a nice html format, so a .txt file works fine and I just open it in word or something like that, and it is readable.
0

Featured Post

Flexible connectivity for any environment

The KE6900 series can extend and deploy computers with high definition displays across multiple stations in a variety of applications that suit any environment. Expand computer use to stations across multiple rooms with dynamic access.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question