[gptalk] Re: local group policy

  • From: "Dave Clapham" <daveclapham@xxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 15 Jan 2009 13:20:08 -0600

Thanks Darren for the info.  I will give that a try when I am over there
next.  I tried some options with gpresult yesterday but couldn't get the
/z switch to work.  But it seems to be working today.  Maybe I had \
instead of /

 

Thanks

Dave 

 

________________________________

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, January 15, 2009 1:15 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: local group policy

 

Dave-

Unfortunately, this is really tough to do. There's no export capability
on the local GPO. The best you can hope for is, if you don't have any
domain-based GPOs applying to these computers, then you can do an RSOP
report against each machine, perhaps using gpresult.exe with the /z
option. Then you can take the output of those reports and use that to do
your comparisons. The thing to keep in mind would be that the local
security settings will not be reported reliably in many cases, because
they do not generate RSOP data. 

 

Not a great answer but depending upon what you need to compare, you can
probably get part-way there.

 

Darren

 

 

Darren Mar-Elia

For comprehensive Windows Group Policy Information, check out
www.gpoguy.com <http://www.gpoguy.com/> -- the best source for GPO FAQs,
video training, tools and whitepapers. Also check out the Windows Group
Policy Guide
<http://www.amazon.com/gp/product/0735622175/qid=1122367169/sr=8-1/ref=p
d_bbs_1/104-1133146-9411929?v=glance&n=283155> , the definitive resource
for Group Policy information. 

 

Group Policy Solutions at www.sdmsoftware.com/products

 

 

 

 

 

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Dave Clapham
Sent: Thursday, January 15, 2009 10:53 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] local group policy

 

I am needing a way to view and print for comparison's sake the enabled
and disabled polices on the local workstation (XP Pro SP3).  I have
entered local policies using gpedit.msc.  

 

Just wanting to make sure I have the same polices on different machines.


 

Thanks,

Dave 

Pawnee Heights Schools

Kansas

Other related posts: