?
Solved

active directory

Posted on 2014-04-15
4
Medium Priority
?
310 Views
Last Modified: 2014-04-16
For a project, I need to find out if a group of users, have certain settings in the Internet Options control panel set.

I have taken care of a small active directory network, and now work in a company with a very large active directory, so I have exposure to this but have never had the time to really learn it.  ( I will ignore local policies for now since Domain policies over-ride local, and my question involves domain policies.)
Also, I don't have access to the domain controllers to look at the group policies.

From what I understand, you can have policies for the user's account and then policies for the computer account then group these policies into OU's ( organizational units ) .
So for example, users 1 - 5 have group polices setup for their user and computer policies, and these users are put into an OU named GroupA. To see what policies are set for this group of users, I could run results of policy by opening a MMC ( microsoft management console ) and adding the RSoP snap in.
If I have this correct, will the RSoP snap in, show the policies for a group, or will I have to run it on each individual user?
If I have to run it on each individual user, would setting up a script be the way to go?
Sorry if my terminology is off, I am self taught and have picked this stuff up over time.
0
Comment
Question by:JeffBeall
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 40001954
If you need to find out what policies are applied to each user, you must logon with that user on respective computer and run below command
rsop.msc
OR
gpresult /h C:\username.html

If your domain users have local admin rights on client computers, then rsop.msc will show you applied computer polices as well on Win7
Gpresult will show you both computer and users polices that was applied and save its output to html file at a path where you specify

Note that in order to apply any group policy to users \ computers you must apply GPO either to domain root level (Domain.com) or to OU in which users and computers are residing

You can run gpresult /h <output path> on multiple machines through some script \ automation to fetch that info

Mahesh.
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 40002431
so gpresult can't run on a group?
Oh well, more work to do.
I think I could use psexec to run
gpresult /h C:\username.html
instead of going to each computer. although i usually google how script things so maybe there is a better way. wish i knew how to script!
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 40003202
You can use psexec with pleasure on list of computers

PsExec.exe @C:\list.txt cmd /c gpresult /v > GPResult.txt

Where list.txt.txt is the text file containing  list of machines in below format
machine1
machine2

one more way to do this
http://www.windows-server-answers.com/microsoft/Windows-Group-Policy/30580380/gpresult-not-working-from-remote-computer.aspx
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 40004236
WOW! that psexec command you supplied works great! thank you for the help.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question