Solved

active directory

Posted on 2014-04-15
4
302 Views
Last Modified: 2014-04-16
For a project, I need to find out if a group of users, have certain settings in the Internet Options control panel set.

I have taken care of a small active directory network, and now work in a company with a very large active directory, so I have exposure to this but have never had the time to really learn it.  ( I will ignore local policies for now since Domain policies over-ride local, and my question involves domain policies.)
Also, I don't have access to the domain controllers to look at the group policies.

From what I understand, you can have policies for the user's account and then policies for the computer account then group these policies into OU's ( organizational units ) .
So for example, users 1 - 5 have group polices setup for their user and computer policies, and these users are put into an OU named GroupA. To see what policies are set for this group of users, I could run results of policy by opening a MMC ( microsoft management console ) and adding the RSoP snap in.
If I have this correct, will the RSoP snap in, show the policies for a group, or will I have to run it on each individual user?
If I have to run it on each individual user, would setting up a script be the way to go?
Sorry if my terminology is off, I am self taught and have picked this stuff up over time.
0
Comment
Question by:JeffBeall
  • 2
  • 2
4 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 40001954
If you need to find out what policies are applied to each user, you must logon with that user on respective computer and run below command
rsop.msc
OR
gpresult /h C:\username.html

If your domain users have local admin rights on client computers, then rsop.msc will show you applied computer polices as well on Win7
Gpresult will show you both computer and users polices that was applied and save its output to html file at a path where you specify

Note that in order to apply any group policy to users \ computers you must apply GPO either to domain root level (Domain.com) or to OU in which users and computers are residing

You can run gpresult /h <output path> on multiple machines through some script \ automation to fetch that info

Mahesh.
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 40002431
so gpresult can't run on a group?
Oh well, more work to do.
I think I could use psexec to run
gpresult /h C:\username.html
instead of going to each computer. although i usually google how script things so maybe there is a better way. wish i knew how to script!
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 40003202
You can use psexec with pleasure on list of computers

PsExec.exe @C:\list.txt cmd /c gpresult /v > GPResult.txt

Where list.txt.txt is the text file containing  list of machines in below format
machine1
machine2

one more way to do this
http://www.windows-server-answers.com/microsoft/Windows-Group-Policy/30580380/gpresult-not-working-from-remote-computer.aspx
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 40004236
WOW! that psexec command you supplied works great! thank you for the help.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now