Wednesday, March 26, 2014

Allow computer policy RSOP data for limited users

What I commonly do is allow the limited users to see all RSOP data on GPRESULT or RSOP.MSC. By default this is not allowed so when you troubleshoot a workstation you can’t gather the needed data to single output but instead need to gather it twise: once with the logged on user and once with an admin account.

This is easy to change by changing this delegation in GPMC:

image

You just need to add this permission to the Authenticated Users group and your done!

8 comments:

  1. Another option would be just logging on with an admin account and run "gpresult /h:gpreport.html /user:NormalUser" it would produce both Computer and Normal User GP data.

    ReplyDelete
    Replies
    1. I agree - kind of... Yes, you can and it's not even a really big thing to do. I love doing everything "with least administrative effort" like in the Microsoft cert exams. There's also some GPP filtering that give false reports if you do the Computer side with different user account.

      Delete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. I read this article. I think You put a lot of effort to create this article.
    Tripontech

    ReplyDelete
  4. In computer tech support jobs, you need to handle both hardware and software related issues of any organization or business. securepubads g doubleclick net

    ReplyDelete
  5. Wonderful I enjoyed looking through your page. I think you are truely remarkable.
    Palm Beach County Computer Repair

    ReplyDelete
  6. Extremely helpful post. This is my first time i visit here. I discovered such a large number of intriguing stuff in your blog particularly its exchange. Truly its extraordinary article. Keep it up. Visit website

    ReplyDelete

Note: Only a member of this blog may post a comment.