Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

GPresult on Windows 7 machine in domain - local security policy report?

Posted on 2013-12-04
3
Medium Priority
?
2,346 Views
Last Modified: 2013-12-04
Environment: Windows 7 Professional in domain environment running server 2008 DC

When on a Windows 7 Pro workstation, logged on as a domain admin I want to see the local security policies that were put in place before the workstation was joined to the domain (and the resulting GPO's gone into affect).

I try:

gpresult /v 

Open in new window


but it only yields the Computer & User security settings applied at the domain level.

How do I find out whats applied at the computer level? Does the report combine the computer settings (non domain) with the computer settings (domain GPO)?

Thanks!
0
Comment
Question by:meade470
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 37

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 39696636
Please run gpresult /h <path to html file> to get output in html format.

This output shows what domain polices applied at computer level, what polices at user level.

Once you join the machine to domain, local computer policies will be overwritten if its got conflicted with domain polices because the order of GPO application is LSDU
L - local policies 1st
S- then site
D - the domain
U - then OU level

So local computer polices will get applied 1st at computer reboot and then OU level polices will get applied last

If you have configured any local polices, you can view it through gpedit.msc.
However any local policy setting if get conflicted with any domain level, OU level polices, that will get overwritten  

Mahesh
0
 
LVL 2

Author Comment

by:meade470
ID: 39696788
Thanks Mahesh. Is there a gpedit /h pathtofile.html for the properties set in the MMC (gpedit.msc) though?
0
 
LVL 37

Assisted Solution

by:Mahesh
Mahesh earned 2000 total points
ID: 39696799
No
html output only for domain based polices

The only way I know is to view gpedit.msc directly for local settings if any.

Mahesh
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

664 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question