How to tell what Group Policies are being appliend and which are not?

I have these 3 new Citrix Servers, that were recently setup by a consultant, and whenever a user logs on to these servers, no mapped network drives are shown.  I attempt to see the mapped network drives from Windows Explorer or by double-clicking 'My Computer'.

The consultant emailed me:  "... You have to look into either using the gpresult/r command or the RSoP wizard in the GPMC to see what GPOs are and are not being applied when logged in and not directly to the server's console.

I have a GPO which hides the A-D drives on the XenApp servers. There is typically no reason a user should be poking around on the server's drives. You can still "see" the drive's contents if you have Windows Explorer open and then in the address bar type in C:\ and hit enter. ..."

Even if I am logged on and I manually run a batch file to map some network drives, those drives do not come up.

I have never tried this command before "gpresult/r".  How may I use this correctly?  

Do I have to be logged on as an Administrator and does the user need to be logged on to the same server at the same time?  

How can I determine if any GPO's were filtered out or not applied?
LVL 1
PkafkasNetwork EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

PkafkasNetwork EngineerAuthor Commented:
I found this website, https://blog.thesysadmins.co.uk/group-policy-gpresult-examples.html .

I think its a good reference; but, please answer my above questions.
0
Sekar ChinnakannuStaff EngineerCommented:
When you login to server and run the command then the output shows all the polices which is applied to user & computer. You just login to server use run as administrator and run the command to view the details. For steps http://www.aprendeinformaticaconmigo.com/windows-server-2008-generando-reportes-con-gpresult-exe/
0
PkafkasNetwork EngineerAuthor Commented:
Hello:

Is there a web address that has a description of gpresult/r in english?

Please keep in mind that this is a Microsoft Terminal Server (Windows 2008 R2).  if I understand correctly according to https://blog.thesysadmins.co.uk/group-policy-gpresult-examples.html ,

I should

1.  Logon as an administrator on the server; but, if I want to see the information / Group policy results for another specific ie user (John Smith , username: johns)

>gpresult /r /user:sa\smith.john

Is that correct?


Or should I type

>gpresult /r /user:sa\johns

As you might tell, I have never attempted this before and I am not certain about the step by step procedures.  I am afraid that if I miss a step I will not get the results and not find out what is truley happening.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Brian CTXSupportCitrix ConsultantCommented:
GPRESULT /R is run from the command prompt.  If you run that from your account you can see what policies are applying, or if any have failed.

For a specific user, you will run the following:

GPRESULT /USER <domain\user> /V /H <filename>

Open in new window


Use the /H and create a file because it may contain too much data to read in the command prompt window.  For the best results, make sure the user is logged into the server when you run the command, or try simply running GPRESULT /R from that user's session.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
PkafkasNetwork EngineerAuthor Commented:
When I Type:

>gpresult /user Domain.com\johnsmith /V <enter>

The following is output:
INFO:  The user "Domain.com\johnsmith" does not have RSOP data

However, the following does work. If I logon to the Terminal Server (Citrix Server) as 'JohnSmith' and if I run the command prompt 'as administrator' and type the following:
>gpresult /user johnsmith /V <enter>

But the data is too much to display in a DOS window just as how "Brian CTXSupport"  suggested.

I would like to export that information for user 'johnsmith' to .txt file.
>>gpresult /user johnsmith  /H gpresultuser.txt<enter>

The command outputs the information into a .txt document in the C:Windows\System32 - folder and it appears to be an .html document.  

html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>DOMAIN\johnsmith on DOMAIN\MOGL-CTX2</title>
<!-- Styles -->
<style type="text/css">
....
</body></html>


How can I output >gpresult /user Domain.com\johnsmith /V into a .txt file?
0
PkafkasNetwork EngineerAuthor Commented:
I used the following:

>gpresult /user johnsmith /V > C:\Downloads\gpresults2.txt <enter>

That put the .txt file in the servers c.:\Dowonloads folder.

Thanks guys.
0
PkafkasNetwork EngineerAuthor Commented:
Brian CTXSupport helped me get on the right track to find the answers I was looking for.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.