Wednesday, March 26, 2014

Allow computer policy RSOP data for limited users

What I commonly do is allow the limited users to see all RSOP data on GPRESULT or RSOP.MSC. By default this is not allowed so when you troubleshoot a workstation you can’t gather the needed data to single output but instead need to gather it twise: once with the logged on user and once with an admin account.

This is easy to change by changing this delegation in GPMC:

image

You just need to add this permission to the Authenticated Users group and your done!

10 comments:

  1. Another option would be just logging on with an admin account and run "gpresult /h:gpreport.html /user:NormalUser" it would produce both Computer and Normal User GP data.

    ReplyDelete
    Replies
    1. I agree - kind of... Yes, you can and it's not even a really big thing to do. I love doing everything "with least administrative effort" like in the Microsoft cert exams. There's also some GPP filtering that give false reports if you do the Computer side with different user account.

      Delete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. I read this article. I think You put a lot of effort to create this article.
    Tripontech

    ReplyDelete
  4. الدليل السعودي أفضل أسعار للإعلانات في المملكة العربية السعوديـةإذا كان لديك خدمة نقل عفش - مكافحة حشرات كشف تسربات - عزل الأسطح والخزانات - نظافة المنازل - قطاع المقاولات "البناء والتشييد - نجارين - مبلطين -مليسين" وترغب في زيادة نشاطك والحصول على فرص أفضل وزيادة عملك وإنتشارك فنحن نُساعدك من خلال الدليل السعودي للدعاية والإعلان - El Daleel El Saudi لمزيد من التفاصيل من هنا
    قائمة بأرقام شركات مكافحة الحشرات وإبادة الحشرات بالمملكة
    تركي 0567792965 مبلط سيراميك ورخام وجميع أنواع البلاط
    http://www.eldaleelelsaudi.com

    ReplyDelete
  5. In computer tech support jobs, you need to handle both hardware and software related issues of any organization or business. securepubads g doubleclick net

    ReplyDelete