Re: Group Policy debug tool?

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 04/26/04 

Date: Mon, 26 Apr 2004 18:48:04 +0200

gpresult as well rsop.msc can be targeted to monitor a remote computer. 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Darren Mar-Elia" <fermentedgrape@yahoo.com> skrev i meddelandet
news:uobct$yKEHA.2952@TK2MSFTNGP10.phx.gbl...
> Actually, neither of these will get you what you want Adam. Userenv.log
just
> tells you what each CSE is doing as the policy is applied and gpedit.log
is
> only good if you are having problems actually editing a GPO. What it
sounds
> like you're asking for is something that will tell you which policy is
> blocking a particular user activity in realtime. Nothing like that exists
> that I know of. You're on track with suggesting something similar to
Regmon,
> and in fact you may be able to use Regmon to get some sense of this. The
> challenge of course is that Regmon is great for telling you about things
> going on in the registry that are obvious, but if you're dealing with
stuff
> like you've described here, using Regmon will be like trying to find a
> needle in a haystack.
>
> One option is to just run gpresult or rsop.msc on the affected client and
> then go through each of the policies that have been set to determine which
> one could be the most likely culprit. The one you've described below
sounds
> like some kind of IE security setting, so I would start with any IE policy
> that has been set up. Its also possible that they used some restrictions
> outside of GPO, like the IEAK, to control some of this IE behavior, in
which
> case you may not find it in GPO. No good answer, unfortunately.
>
> Darren
>
> "Chriss3" <noSpamHere@chrisse.se> wrote in message
> news:OX2pvqwKEHA.3076@TK2MSFTNGP10.phx.gbl...
> > JSI Tip 3799. How do I monitor group policy functions?
> > http://www.jsiinc.com/SUBH/tip3700/rh3799.htm
> >
> > 250842 - Troubleshooting Group Policy Application Problems
> > http://support.microsoft.com/default.aspx?scid=kb;EN-US;250842
> >
> > You can also use the command line tool gpresult.
> >
>
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp
> >
> > -- 
> > Regards
> > Christoffer Andersson
> >
> > No email replies please - reply in the newsgroup
> > ------------------------------------------------
> > http://www.chrisse.se - Active Directory Tips
> > "Adam Leinss" <aleinss@toughguy.net> skrev i meddelandet
> > news:30538e20.0404251224.581996ec@posting.google.com...
> > > Does a group policy debug tool exist?  We had a 3rd party come in to
> > > do our group policy setup.  Now that we are implementing Windows 2000
> > > in departments we are finding users are restricted by group policy in
> > > silly ways, such as not being able to save a DOC file from a web site.
> > >  We then have to go into the GPMC and through guesswork drill down to
> > > what we think the policy is that is blocking the particular action the
> > > user is trying to do.  It would be nice to turn on the tool, do the
> > > action and then when that user gets the restriction  have that logged
> > > somewhere so we can track what policy is causing the action.
> > >
> > > If you ever used Regmon to monitor a program's access to the registry
> > > or Filemon to monitor a program's access to file(s), I'm thinking this
> > > utility would work that way.
> > >
> > > Thanks,
> > > Adam
> >
> >
>
>

Relevant Pages

  • Re: Group Policy debug tool?
    ... In fact gpresult do this. ... > Well, yes, but the point is that they don't tell you which policy is ... > affecting a particular user activity. ... >>> and in fact you may be able to use Regmon to get some sense of this. ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy debug tool?
    ... neither of these will get you what you want Adam. ... tells you what each CSE is doing as the policy is applied and gpedit.log is ... You're on track with suggesting something similar to Regmon, ... How do I monitor group policy functions? ...
    (microsoft.public.windows.group_policy)
  • Re: How to configure LogOff script to remove a folder from users m
    ... A copy of the GPRESULT output won't be much use in this case, ... Director of IT (MCP, MCDBA) ... Just right click the OU and select "link existing group policy". ...
    (microsoft.public.windows.group_policy)
  • Re: syntax problem with gpresult - and problem with Group Pol in gener
    ... Because GP runs out of Winlogon, that sort of would confirm my suspicion, but one way to check is to view the profile of one of these service accounts on a machine in question. ... You can drill into them to the policy location and verify that you are getting policy settings under them. ... I am running gpresult with the following syntax and cannot get the ... for usage. ...
    (microsoft.public.win2000.group_policy)
  • Re: Ethereal Capture Decoding
    ... >We are using Ethereal to monitor our network. ... >a very clear corporate policy of no privacy, ... While I'm able to capture the data stream using the Follow TCP ...
    (comp.os.ms-windows.nt.admin.security)