Reporting Tools for GPO
Mark F
Can anyone help our quest for a reporting tool that can scan Group Policy
Objects directly from their Group Template folders, and report what's been
changed from their defaults? Two trial-ware that I'd downloaded were suites
and had pre-requisites typical of AD admin, rather than Novell.
It'd be a plus, but not essential, if it could report possible conflicts in
which bits of the policy override other bits elsewhere, as different parts of
the policy set the same thing (I'm told). We need to rebuild our Staff
Policy. Thanks.
AdminLecWinXPSP2\gpt.ini
AdminLecWinXPSP2\Adm\admfiles.ini
AdminLecWinXPSP2\Adm\conf.adm
AdminLecWinXPSP2\Adm\HKCUUserShellFolders.adm
AdminLecWinXPSP2\Adm\inetres.adm
AdminLecWinXPSP2\Adm\system.adm
AdminLecWinXPSP2\Adm\wmplayer.adm
AdminLecWinXPSP2\Adm\wuau.adm
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\IPS1.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\XPSec.dat
AdminLecWinXPSP2\Machine\Microsoft\Windows NT\SecEdit\ZenOSver.inf
AdminLecWinXPSP2\User\Registry.pol
AdminLecWinXPSP2\User\MICROSOFT\IEAK\install.ins
AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONE S\seczones.inf
AdminLecWinXPSP2\User\MICROSOFT\IEAK\BRANDING\ZONE S\seczrsop.inf
Anthony [MVP]
There are three Group Policies that exist by default and have default
settings:
- Default Domain
- Default Domain Controller
- Local Security
The Group Policy templates for new Group Policies don't have any settings.
You can use Group Policy Modelling and RSOP to see what settings will
actually take effect after you create a new policy.
There are various third party tools for Group Policy, but I am not aware of
any that do what you describe,
Anthony,
http://www.airdesk.com
"Mark F" <Ma...@discussions.microsoft.com> wrote in message
news:819F1FF4-E950-471B...@microsoft.com...
Darren Mar-Elia
Keep in mind that the mere presence of those GPT files indicates that the
GPO has been configured differently than the "default". That is, a default
GPO is an empty GPO. If you are asking what settings are being applied to a
given target computer or user that are different from the norm, then, as
Anthony points out, a RSOP (GPMC GP Results) report is your best bet.
As for looking for conflicts, this is not easy to do today --essentially you
would have to do it manually for a given user/computer.
Darren
----
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com
Automate Group Policy audits and changes with the GPExpert™ Scripting
Toolkit http://www.sdmsoftware.com/group_policy_scripting
----
"Anthony [MVP]" <ant...@no-reply.com> wrote in message
news:ufB2rH1O...@TK2MSFTNGP04.phx.gbl...