How do I get report for GPO result for computers and users in domain?

certuran
certuran used Ask the Experts™
on
How do I get report for GPO result for computers and users in domain?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
I should add that information: When I used "GPRESULT /USER xyz /r" it resulted that: The user "xyz" does not have RSOP data.
systechSenior Technical Lead

Commented:
Hi,

There are few ways to get the gpresult/rsop.

1) Go to Active directory>>Select the user/computer>>Right click and All Tasks>>Resultant Set of Policy (logging). Run the wizard and collect the report.

2) From the machine itself run rsop.msc>>if this giving any error then you need to alter some registry key. Please follow the below procedure;

Start>>Run>>regedit>>HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System>>Delete the following registry value 'RSoPLogging REG_DWORD 0x00000000'>>Log off the machine and login (do not restart).

Now, run rsop again that should work.
Lionel MMSmall Business IT Consultant

Commented:
what version of windows are you running GPRESULT /USER xyz /r on? It works on Windows XP, 7 & 10 (part of domain and not part of); Windows server 2008 & 2012. Does not work on Server 2003 but GPRESULT /USER xyz /v does
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Thomas GrassiSystems Administrator

Commented:
In order to get that working remotely you need to updated the firewall

netsh advfirewall firewall set rule group="Windows Remote Management" new enable=yes

This will allow running gpresult remotely

I created a script to do this

Using the tool psexec from  
https://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

you can run this

@echo off
cd\util
echo %date% %time% >c:\util\serv012.txt
echo "Starting GPRESULT on SERV012" >>c:\util\serv012.txt
gpresult /r >>c:\util\serv012.txt

echo %date% %time% >c:\util\serv011.txt
echo "Starting GPRESULT on SERV011" >>c:\util\serv011.txt
c:\util\pstools\psexec \\serv011 -u administrator -p xxxxxxxx gpresult /r >>c:\util\serv011.txt

echo %date% %time% >c:\util\serv013.txt
echo "Starting GPRESULT on SERV013" >>c:\util\serv013.txt
c:\util\pstools\psexec \\serv013 -u administrator -p xxxxx gpresult /r >>c:\util\serv013.txt

echo %date% %time% >c:\util\comp001.txt
echo "Starting GPRESULT on COMP001 Windows 7" >>c:\util\comp001.txt
c:\util\pstools\psexec \\comp001 -u "mydom\me" -p xxxxxxxx gpresult /r >>c:\util\comp001.txt

need administrator account on each machine


HTH
Commented:
Excuse me, I will come back to this question later. So I need to close it.

Author

Commented:
Thank you
Thomas GrassiSystems Administrator

Commented:
Why no points?

You said thank you for what?

Reopen this and assign us points


Thank you

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial