Link to home
Start Free TrialLog in
Avatar of Pkafkas
Pkafkas

asked on

How to tell what Group Policies are being appliend and which are not?

I have these 3 new Citrix Servers, that were recently setup by a consultant, and whenever a user logs on to these servers, no mapped network drives are shown.  I attempt to see the mapped network drives from Windows Explorer or by double-clicking 'My Computer'.

The consultant emailed me:  "... You have to look into either using the gpresult/r command or the RSoP wizard in the GPMC to see what GPOs are and are not being applied when logged in and not directly to the server's console.

I have a GPO which hides the A-D drives on the XenApp servers. There is typically no reason a user should be poking around on the server's drives. You can still "see" the drive's contents if you have Windows Explorer open and then in the address bar type in C:\ and hit enter. ..."

Even if I am logged on and I manually run a batch file to map some network drives, those drives do not come up.

I have never tried this command before "gpresult/r".  How may I use this correctly?  

Do I have to be logged on as an Administrator and does the user need to be logged on to the same server at the same time?  

How can I determine if any GPO's were filtered out or not applied?
Avatar of Pkafkas
Pkafkas

ASKER

I found this website, https://blog.thesysadmins.co.uk/group-policy-gpresult-examples.html .

I think its a good reference; but, please answer my above questions.
Avatar of Sekar Chinnakannu
When you login to server and run the command then the output shows all the polices which is applied to user & computer. You just login to server use run as administrator and run the command to view the details. For steps http://www.aprendeinformaticaconmigo.com/windows-server-2008-generando-reportes-con-gpresult-exe/
Avatar of Pkafkas

ASKER

Hello:

Is there a web address that has a description of gpresult/r in english?

Please keep in mind that this is a Microsoft Terminal Server (Windows 2008 R2).  if I understand correctly according to https://blog.thesysadmins.co.uk/group-policy-gpresult-examples.html ,

I should

1.  Logon as an administrator on the server; but, if I want to see the information / Group policy results for another specific ie user (John Smith , username: johns)

>gpresult /r /user:sa\smith.john

Is that correct?


Or should I type

>gpresult /r /user:sa\johns

As you might tell, I have never attempted this before and I am not certain about the step by step procedures.  I am afraid that if I miss a step I will not get the results and not find out what is truley happening.
ASKER CERTIFIED SOLUTION
Avatar of Brian CTXSupport
Brian CTXSupport
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pkafkas

ASKER

When I Type:

>gpresult /user Domain.com\johnsmith /V <enter>

The following is output:
INFO:  The user "Domain.com\johnsmith" does not have RSOP data

However, the following does work. If I logon to the Terminal Server (Citrix Server) as 'JohnSmith' and if I run the command prompt 'as administrator' and type the following:
>gpresult /user johnsmith /V <enter>

But the data is too much to display in a DOS window just as how "Brian CTXSupport"  suggested.

I would like to export that information for user 'johnsmith' to .txt file.
>>gpresult /user johnsmith  /H gpresultuser.txt<enter>

The command outputs the information into a .txt document in the C:Windows\System32 - folder and it appears to be an .html document.  

html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>DOMAIN\johnsmith on DOMAIN\MOGL-CTX2</title>
<!-- Styles -->
<style type="text/css">
....
</body></html>


How can I output >gpresult /user Domain.com\johnsmith /V into a .txt file?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pkafkas

ASKER

Brian CTXSupport helped me get on the right track to find the answers I was looking for.