Re: Unable to run 'gpresult'

Tech-Archive recommends: Fix windows errors by optimizing your registry

I'm having a very similar problem. I can run gpresult from an XP workstation:
gpresult /S DC-Server /U Username
and I get a response. If I log in as that user on the DC and run gpresult, I
get this error:
INFO: The user does not have RSOP data.
If I then run rsop.msc, I get:
The RSoP snap-in was unable to generate the computer or user's data due to
insufficient permissions.

There is nothing in the event log that helps. I have a feeling this is a
policy setting of some kind, but it's not in the default domain controllers
policy because there is another domain controller it works fine on.

"Steven L Umbach" wrote:

> Hmm. When you are logged onto an XP computer can you do a RSOP using the
> domain controller [another computer option] and your user account as the
> computer and if so are their any Group Policy restrictions shown that may be
> denying access?? Anything listed in the system/application logs on the
> domain controller that may be related?? --- Steve
>
>
> "Ralish" <Ralish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:19F0860C-8B8A-44F2-8149-478140F5EC40@xxxxxxxxxxxxxxxx
> > No luck :/
> >
> > The interesting thing is when I am logged into any client computer (XP
> > SP2)
> > I can run gpresult fine. I am a domain admin but standard domain users can
> > also successfully run gpresult as well from their workstations. I only get
> > access denied when running gpresult from the DC logged in from the
> > Administrator account. I tried your suggestion but no luck :/
> >
> > "Steven L Umbach" wrote:
> >
> >> Check to see that you are logged on as a domain administrator to see if
> >> that
> >> helps and look in the application/system logs of the dc to see if any
> >> Event
> >> ID's have been recorded at the time that access was denied to see if they
> >> provide a clue. Also try running the RSOP for the user selecting the
> >> domain
> >> controller as the target computer to see if that works or not. ---
> >> Steve
> >>
> >>
> >> "Ralish" <Ralish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> news:1CECE526-EC06-4A6C-A3FB-14C4D6667B51@xxxxxxxxxxxxxxxx
> >> > Greetings,
> >> >
> >> > I tried to run 'gpresult' on a Windows Server 2003 box to check some
> >> > Group
> >> > Policy data, however, I got an "ERROR: Access Denied." message
> >> > immediately
> >> > after gpresult tried to start the RSoP Session for the active use (A
> >> > Domain
> >> > Administrator). What would cause this problem? Any suggestions on how
> >> > to
> >> > fix?
> >> > Thanks in advance...
> >> >
> >> > PS: The box in question is a Windows Server 2003 PDC...
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: Cannot access Default Domain Conrollers Policy -- DCPROMO error
    ... If there are no GPO's in the "domain controller" container then you can create a new ... Did gpresult show any policies being ... Last time Group Policy was applied: Monday, April 19, 2004 at 7:45:00 PM ... The computer received "Registry" settings from these GPOs: ...
    (microsoft.public.win2000.security)
  • Re: Unable to run gpresult
    ... When you are logged onto an XP computer can you do a RSOP using the ... domain controller and your user account as the ... > also successfully run gpresult as well from their workstations. ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy review tool
    ... sure which policy it was. ... You could however save the output from GPResult /Z each ... Using RSoP similarly might be useful, but I actually prefer the text ... support tracking GPO changes and rollback. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Policy problem
    ... Your policy stops you from doing this, ... Change the policy to allow cmd to run and then do the audit. ... using gpresult or RSOP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Curious drive mapping problem
    ... script. ... Try using RSOP or a GPresult to see if any GPO's apply. ... Jaap de Koning. ...
    (microsoft.public.windows.server.general)