Avatar of certuran
certuran
Flag for Turkey asked on

How do I get report for GPO result for computers and users in domain?

How do I get report for GPO result for computers and users in domain?
Active Directory

Avatar of undefined
Last Comment
Member_2_6492660_1

8/22/2022 - Mon
certuran

ASKER
I should add that information: When I used "GPRESULT /USER xyz /r" it resulted that: The user "xyz" does not have RSOP data.
Radhakrishnan

Hi,

There are few ways to get the gpresult/rsop.

1) Go to Active directory>>Select the user/computer>>Right click and All Tasks>>Resultant Set of Policy (logging). Run the wizard and collect the report.

2) From the machine itself run rsop.msc>>if this giving any error then you need to alter some registry key. Please follow the below procedure;

Start>>Run>>regedit>>HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System>>Delete the following registry value 'RSoPLogging REG_DWORD 0x00000000'>>Log off the machine and login (do not restart).

Now, run rsop again that should work.
Lionel MM

what version of windows are you running GPRESULT /USER xyz /r on? It works on Windows XP, 7 & 10 (part of domain and not part of); Windows server 2008 & 2012. Does not work on Server 2003 but GPRESULT /USER xyz /v does
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
Member_2_6492660_1

In order to get that working remotely you need to updated the firewall

netsh advfirewall firewall set rule group="Windows Remote Management" new enable=yes

This will allow running gpresult remotely

I created a script to do this

Using the tool psexec from  
https://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

you can run this

@echo off
cd\util
echo %date% %time% >c:\util\serv012.txt
echo "Starting GPRESULT on SERV012" >>c:\util\serv012.txt
gpresult /r >>c:\util\serv012.txt

echo %date% %time% >c:\util\serv011.txt
echo "Starting GPRESULT on SERV011" >>c:\util\serv011.txt
c:\util\pstools\psexec \\serv011 -u administrator -p xxxxxxxx gpresult /r >>c:\util\serv011.txt

echo %date% %time% >c:\util\serv013.txt
echo "Starting GPRESULT on SERV013" >>c:\util\serv013.txt
c:\util\pstools\psexec \\serv013 -u administrator -p xxxxx gpresult /r >>c:\util\serv013.txt

echo %date% %time% >c:\util\comp001.txt
echo "Starting GPRESULT on COMP001 Windows 7" >>c:\util\comp001.txt
c:\util\pstools\psexec \\comp001 -u "mydom\me" -p xxxxxxxx gpresult /r >>c:\util\comp001.txt

need administrator account on each machine


HTH
ASKER CERTIFIED SOLUTION
certuran

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
certuran

ASKER
Thank you
Member_2_6492660_1

Why no points?

You said thank you for what?

Reopen this and assign us points


Thank you
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.