?
Solved

active directory

Posted on 2014-04-15
4
Medium Priority
?
312 Views
Last Modified: 2014-04-16
For a project, I need to find out if a group of users, have certain settings in the Internet Options control panel set.

I have taken care of a small active directory network, and now work in a company with a very large active directory, so I have exposure to this but have never had the time to really learn it.  ( I will ignore local policies for now since Domain policies over-ride local, and my question involves domain policies.)
Also, I don't have access to the domain controllers to look at the group policies.

From what I understand, you can have policies for the user's account and then policies for the computer account then group these policies into OU's ( organizational units ) .
So for example, users 1 - 5 have group polices setup for their user and computer policies, and these users are put into an OU named GroupA. To see what policies are set for this group of users, I could run results of policy by opening a MMC ( microsoft management console ) and adding the RSoP snap in.
If I have this correct, will the RSoP snap in, show the policies for a group, or will I have to run it on each individual user?
If I have to run it on each individual user, would setting up a script be the way to go?
Sorry if my terminology is off, I am self taught and have picked this stuff up over time.
0
Comment
Question by:JeffBeall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 38

Expert Comment

by:Mahesh
ID: 40001954
If you need to find out what policies are applied to each user, you must logon with that user on respective computer and run below command
rsop.msc
OR
gpresult /h C:\username.html

If your domain users have local admin rights on client computers, then rsop.msc will show you applied computer polices as well on Win7
Gpresult will show you both computer and users polices that was applied and save its output to html file at a path where you specify

Note that in order to apply any group policy to users \ computers you must apply GPO either to domain root level (Domain.com) or to OU in which users and computers are residing

You can run gpresult /h <output path> on multiple machines through some script \ automation to fetch that info

Mahesh.
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 40002431
so gpresult can't run on a group?
Oh well, more work to do.
I think I could use psexec to run
gpresult /h C:\username.html
instead of going to each computer. although i usually google how script things so maybe there is a better way. wish i knew how to script!
0
 
LVL 38

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 40003202
You can use psexec with pleasure on list of computers

PsExec.exe @C:\list.txt cmd /c gpresult /v > GPResult.txt

Where list.txt.txt is the text file containing  list of machines in below format
machine1
machine2

one more way to do this
http://www.windows-server-answers.com/microsoft/Windows-Group-Policy/30580380/gpresult-not-working-from-remote-computer.aspx
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 40004236
WOW! that psexec command you supplied works great! thank you for the help.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question