GPResult not showing Account Policies or Audit Policy information.

I manage a secure control network, that does not currently have a domain. We are running Windows 7. We use local accounts, and I have some basic local group policy settings configured. I was looking for a way to document and audit these settings, and found that GPResult does a really nice job of reporting most of my settings. However the sections Account Policies and Audit Policy, under the Computer Configuration section, show N/A for the results.

I have Password length and complexity requirements set, as well as Audit Policies in the Local Group Policy. If I run auditpol.exe it shows me that the Audit Policy I set is in affect.

The command I am running is: gpresult -Z -F >C:\Temp\report.txt

When I run that command on my domain computer, it shows the Default Domain Policy settings for Passwords and Audit. Does it show up as N/A because this section only reports on Domain based Policies? I thought it was supposed to report whatever the RSOP is.
FBCTechAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lionel MMSmall Business IT ConsultantCommented:
You are on the right track--I copied and ran your exact command on my PC (also not on a domain) and got the same results N/A -- keep in mind that Group policy is there to apply common settings to more than one user or PCs (in a network) so the n/a indicates that in the setting for this one system this common setting is not applied (or not applicable) but may be if it becomes part of a common network.
0
FBCTechAuthor Commented:
But the settings are applied, the audit policy sets what types of events are logged and I receive those in event viewer and on my syslog server. Also if I run the net accounts command, I can see the password policy, I have not yet tried to set a password that does not comply with my policy to confirm if it is enforced. I can create reports that show what I need using 3 commands, but I believe it should be all shown in that 1 report.

If that is not how gpresult works, that is also fine, as long as I have some proof to show the auditors if they ask why it says N/A.
0
Lionel MMSmall Business IT ConsultantCommented:
If you want a more complete and thorough use of GPO objects you should use it on a domain especially if you are talking about having to provide legally binding reports to auditors. There you can use the results wizard tool for a much cleaner and clearer reports. As you can see from my PC--here is my password policy settings--clearly set and yet in my report it also says n/a so there are simply some settings that do not show in that report. I will see if I can find some other software that can reports on ALL these settings.
ee-password-local-gpo.jpg
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FBCTechAuthor Commented:
Ok thanks, I already have found other commands as I said in my previous comments. I am hoping to move to a domain at some point in the future, but it is easier said than done.

For the time being, I am going to assume that gpresult only reports these sections from a domain policy and just use multiple reports.

thank you.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.