Where is my group policy enabled?` 2

[secutanudu]

I have a PC that has some features disabled due to a combination of local group policy, OU policies, and domain policies. Is there any way to list ALL enabled policies so that, for example, if my control panel is disabled, and i dont know where i disabled it, i can simply list all enabled policy settings and find it?

 

[mrmoneymatters]

You need to run gpresult from the command line. You will have to download it first.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

 

[secutanudu]

I think i didn't detail my question enough - not only do i want to show policies that are enabled - i want to show which features are enabled.

For example - if my control panel is turned off - how can i find out where it is being disabled?

 

[mrmoneymatters]

Well, gpresult will show you the applied group policies. If you need more detail at once and you have an XP machine you can load the group policy management console. It will show you everyhing.

 

[secutanudu]

Well i was wondering if there was a quick way to list only enabled options, since there are so many options you can set with group policy.

The reason i wanted it was because there were some restrictions on the domain that i didnt create, and i had no idea where they were coming from. I dont know group policies well enough to know exactly where to go to shut off the restrictions.

 

[serhino320]

secutanudu-
If you have an XP Pro machine you can run the "Resultant Set of Policy" snap-in in the the mmc console. If you run it from an account that has domain admin rights you can probe any user/computer in your domain and see exactly what policy is controlling which enabled/disabled options and it lists only the options that have been specifically set. It does not blurt out every GPO setting that is set by default. I can sit at my XP Pro desk machine logged in as a domain admin and see what policies are in effect on any one of my 50 domain computers without leaving my office. Of course if your client machines are XP you could run the "RSoP" snap-in locally on each machine as a local admin and see the same thing. I don't think Windows 2000 Server has the RSoP snap-in, but Windows 2003 Server does.

Just run "mmc" from Start->Run and under the File menu of the console select Add/remove snap-in. In the next window select Add from the Standalone tab and go down the list until you see Resultant Set of Policy. Close and OK out of the add-in manager. Right click on the RSoP snap-in and select Generate RSoP data. Follow the prompts to investigate locally or networked PCs and users.

serhino

 

[secutanudu]

Excellent - that sounds perfect. I will try it in the office tomorrow. Thanks.

 

[secutanudu]

This worked great - thanks.