Tuesday, 22 March 2011

Group Policy Object (GPO) Processing



Group Policy Object (GPO) Processing


Group Policy Objects are a powerful tool for deploying applications and controlling machine configuration.  However, GPO processing can be complicated and confusing.  The Resource Kit contains a useful tool called GPResult that can help identify how a collection of policies can affect a user.  Yale has an example output from GPResult available at their website. Stanford has an excellent write-up detailing Loop-Back Processing within Windows 2000.

Group Memberships


Because Groups can be nested, trouble-shooting group membership can be difficult.  Several Resource Kit tools (local.exe, findgrp.exe. and showmbrs.exe) are very helpful at enumerating group memberships.

0 comments:

Post a Comment