active directory

For a project, I need to find out if a group of users, have certain settings in the Internet Options control panel set.

I have taken care of a small active directory network, and now work in a company with a very large active directory, so I have exposure to this but have never had the time to really learn it.  ( I will ignore local policies for now since Domain policies over-ride local, and my question involves domain policies.)
Also, I don't have access to the domain controllers to look at the group policies.

From what I understand, you can have policies for the user's account and then policies for the computer account then group these policies into OU's ( organizational units ) .
So for example, users 1 - 5 have group polices setup for their user and computer policies, and these users are put into an OU named GroupA. To see what policies are set for this group of users, I could run results of policy by opening a MMC ( microsoft management console ) and adding the RSoP snap in.
If I have this correct, will the RSoP snap in, show the policies for a group, or will I have to run it on each individual user?
If I have to run it on each individual user, would setting up a script be the way to go?
Sorry if my terminology is off, I am self taught and have picked this stuff up over time.
LVL 1
JeffBeallAsked:
Who is Participating?
 
MaheshConnect With a Mentor ArchitectCommented:
You can use psexec with pleasure on list of computers

PsExec.exe @C:\list.txt cmd /c gpresult /v > GPResult.txt

Where list.txt.txt is the text file containing  list of machines in below format
machine1
machine2

one more way to do this
http://www.windows-server-answers.com/microsoft/Windows-Group-Policy/30580380/gpresult-not-working-from-remote-computer.aspx
0
 
MaheshArchitectCommented:
If you need to find out what policies are applied to each user, you must logon with that user on respective computer and run below command
rsop.msc
OR
gpresult /h C:\username.html

If your domain users have local admin rights on client computers, then rsop.msc will show you applied computer polices as well on Win7
Gpresult will show you both computer and users polices that was applied and save its output to html file at a path where you specify

Note that in order to apply any group policy to users \ computers you must apply GPO either to domain root level (Domain.com) or to OU in which users and computers are residing

You can run gpresult /h <output path> on multiple machines through some script \ automation to fetch that info

Mahesh.
0
 
JeffBeallAuthor Commented:
so gpresult can't run on a group?
Oh well, more work to do.
I think I could use psexec to run
gpresult /h C:\username.html
instead of going to each computer. although i usually google how script things so maybe there is a better way. wish i knew how to script!
0
 
JeffBeallAuthor Commented:
WOW! that psexec command you supplied works great! thank you for the help.
0
All Courses

From novice to tech pro — start learning today.