Link to home
Start Free TrialLog in
Avatar of certuran
certuranFlag for Türkiye

asked on

How do I get report for GPO result for computers and users in domain?

How do I get report for GPO result for computers and users in domain?
Avatar of certuran
certuran
Flag of Türkiye image

ASKER

I should add that information: When I used "GPRESULT /USER xyz /r" it resulted that: The user "xyz" does not have RSOP data.
Avatar of Radhakrishnan
Hi,

There are few ways to get the gpresult/rsop.

1) Go to Active directory>>Select the user/computer>>Right click and All Tasks>>Resultant Set of Policy (logging). Run the wizard and collect the report.

2) From the machine itself run rsop.msc>>if this giving any error then you need to alter some registry key. Please follow the below procedure;

Start>>Run>>regedit>>HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System>>Delete the following registry value 'RSoPLogging REG_DWORD 0x00000000'>>Log off the machine and login (do not restart).

Now, run rsop again that should work.
what version of windows are you running GPRESULT /USER xyz /r on? It works on Windows XP, 7 & 10 (part of domain and not part of); Windows server 2008 & 2012. Does not work on Server 2003 but GPRESULT /USER xyz /v does
In order to get that working remotely you need to updated the firewall

netsh advfirewall firewall set rule group="Windows Remote Management" new enable=yes

This will allow running gpresult remotely

I created a script to do this

Using the tool psexec from  
https://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

you can run this

@echo off
cd\util
echo %date% %time% >c:\util\serv012.txt
echo "Starting GPRESULT on SERV012" >>c:\util\serv012.txt
gpresult /r >>c:\util\serv012.txt

echo %date% %time% >c:\util\serv011.txt
echo "Starting GPRESULT on SERV011" >>c:\util\serv011.txt
c:\util\pstools\psexec \\serv011 -u administrator -p xxxxxxxx gpresult /r >>c:\util\serv011.txt

echo %date% %time% >c:\util\serv013.txt
echo "Starting GPRESULT on SERV013" >>c:\util\serv013.txt
c:\util\pstools\psexec \\serv013 -u administrator -p xxxxx gpresult /r >>c:\util\serv013.txt

echo %date% %time% >c:\util\comp001.txt
echo "Starting GPRESULT on COMP001 Windows 7" >>c:\util\comp001.txt
c:\util\pstools\psexec \\comp001 -u "mydom\me" -p xxxxxxxx gpresult /r >>c:\util\comp001.txt

need administrator account on each machine


HTH
ASKER CERTIFIED SOLUTION
Avatar of certuran
certuran
Flag of Türkiye image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you
Why no points?

You said thank you for what?

Reopen this and assign us points


Thank you