Determining the Effective Group Policy Settings and Last Refresh

Previously we mentioned using Group Policy modeling for logging Resultant Set of Policy (RSoP). When you use Group Policy modeling in this way, you can review:

  • All of the Policy objects that apply to a computer

  • The last time the applicable policy objects were processed (refreshed)

  • The user currently logged on to that computer (if any)

All domain and enterprise administrators have permission to model Group Policy for logging, as do those who have been delegated permission to Read Group Policy Results Data. To model Group Policy for the purpose of logging RSoP, complete these steps:

  1. In the GPMC, right-click the Group Policy Results node, and then select Group Policy Results Wizard.

  2. When the Group Policy Results Wizard starts, click Next. On the Computer Selection page, shown in Figure 3-28, select This Computer to view information for the local computer.

    Selecting the computer for which you want to log RSoP

    Figure 3-28. Selecting the computer for which you want to log RSoP

    If you want to view information for a remote computer, select Another Computer and then click Browse. In the Select Computer dialog box, type the name of the computer, and then click Check Names.

    After you select the correct computer account, click OK.

  3. By default, both user and computer policy settings are logged. If you want to see results only for user policy settings, select Do Not Display Policy Settings For The Selected Computer.

  4. In the Group Policy Results Wizard, click Next. On the User Selection page, shown in Figure 3-29, select the user whose policy information you want to view. You can view policy information for any user who has logged on to the computer.

    Selecting the user whose RSoP for this computer you want to view

    Figure 3-29. Selecting the user whose RSoP for this computer you want to view

    If you want to see results only for computer policy settings, select Do Not Display User Policy Settings.

  5. To complete the modeling, click Next twice, and then click Finish. The wizard generates a report, the results of which are displayed in the Details pane.

  6. As shown in Figure 3-30, the name of the modeling report is generated based on the user and computer you chose. Click on the name to highlight it for editing. Type a descriptive name for the modeling report, and then press Tab.

    Giving the report a descriptive name and then viewing the report details

    Figure 3-30. Giving the report a descriptive name and then viewing the report details

  7. On the report, click Show All to display all of the policy information that was modeled. You can then work through the various nodes of the report to view the effective settings for the selected user, computer, or both. Keep the following in mind:

    • To view the last time the computer or user policy was refreshed, look under Computer Configuration Summary, General for the Last Time Group Policy Was Processed or User Configuration Summary, General for the Last Time Group Policy Was Processed as appropriate.

    • To view applied policy objects for the computer or user, look under Computer Configuration Summary, Group Policy Objects, Applied GPOs or User Configuration Summary, Group Policy Objects, Applied GPOs as appropriate.

    • To view denied policy objects for the computer or user, look under Computer Configuration Summary, Group Policy Objects, Denied GPOs or User Configuration Summary, Group Policy Objects, Denied GPOs as appropriate.

Note

Note

The entries under Denied Policy objects show all Policy objects that should have been applied but weren’t. This typically occurs because the policy objects were empty or did not contain any computer or user policy settings. The policy object also might not have been processed because inheritance was blocked. If so, the Reason Denied is stated as Blocked SOM.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset