Solved

active directory

Posted on 2014-04-15
4
305 Views
Last Modified: 2014-04-16
For a project, I need to find out if a group of users, have certain settings in the Internet Options control panel set.

I have taken care of a small active directory network, and now work in a company with a very large active directory, so I have exposure to this but have never had the time to really learn it.  ( I will ignore local policies for now since Domain policies over-ride local, and my question involves domain policies.)
Also, I don't have access to the domain controllers to look at the group policies.

From what I understand, you can have policies for the user's account and then policies for the computer account then group these policies into OU's ( organizational units ) .
So for example, users 1 - 5 have group polices setup for their user and computer policies, and these users are put into an OU named GroupA. To see what policies are set for this group of users, I could run results of policy by opening a MMC ( microsoft management console ) and adding the RSoP snap in.
If I have this correct, will the RSoP snap in, show the policies for a group, or will I have to run it on each individual user?
If I have to run it on each individual user, would setting up a script be the way to go?
Sorry if my terminology is off, I am self taught and have picked this stuff up over time.
0
Comment
Question by:JeffBeall
  • 2
  • 2
4 Comments
 
LVL 36

Expert Comment

by:Mahesh
ID: 40001954
If you need to find out what policies are applied to each user, you must logon with that user on respective computer and run below command
rsop.msc
OR
gpresult /h C:\username.html

If your domain users have local admin rights on client computers, then rsop.msc will show you applied computer polices as well on Win7
Gpresult will show you both computer and users polices that was applied and save its output to html file at a path where you specify

Note that in order to apply any group policy to users \ computers you must apply GPO either to domain root level (Domain.com) or to OU in which users and computers are residing

You can run gpresult /h <output path> on multiple machines through some script \ automation to fetch that info

Mahesh.
0
 
LVL 1

Author Comment

by:JeffBeall
ID: 40002431
so gpresult can't run on a group?
Oh well, more work to do.
I think I could use psexec to run
gpresult /h C:\username.html
instead of going to each computer. although i usually google how script things so maybe there is a better way. wish i knew how to script!
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 40003202
You can use psexec with pleasure on list of computers

PsExec.exe @C:\list.txt cmd /c gpresult /v > GPResult.txt

Where list.txt.txt is the text file containing  list of machines in below format
machine1
machine2

one more way to do this
http://www.windows-server-answers.com/microsoft/Windows-Group-Policy/30580380/gpresult-not-working-from-remote-computer.aspx
0
 
LVL 1

Author Closing Comment

by:JeffBeall
ID: 40004236
WOW! that psexec command you supplied works great! thank you for the help.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question