| Author | Messages | |
neilruston
Posts:155
 | | 07/18/2008 8:09 AM |
| Hi,
A RSOP and local policies question from a colleague. Passed on here
verbatim :-)
Any ideas?
neil
"Do you know of issues using RSOP to see local policy settings (or
rather to see the full RSOP including local settings).
I seem to be getting variable results on both XP and Vista .
(To be honest, in the past I've not had to deal much with local policies
as I've always used Domain GPOs).
The problem I'm seeing is that the RSOP reports (generated locally and
via GPMC) include some references to local policies, but many are not
visible even though GPEDIT shows them as set.
Its not that they are being over-ridden by domain/ou GP settings, its
that the setting doesn't appear in the report at all.
This is particularly true for settings under 'Security Options' for
example.
Some settings are showing as defined in "Local Group Policy" e.g. under
Computer Config\Admin templates and Startup & Logon scripts under
Windows Settings\Scripts.
Any thoughts?"
Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.
Internet communications are not guaranteed to be secure or virus-free. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.
Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services Authority.
| | | |
| darren
Posts:168
| | 07/18/2008 8:09 AM |
| Yep. Known issue with RSOP on the local GPO. Basically this information is
not collected at all for any security policy. The reason for this is that
when you set local security policy, the changes are being made right then
and there to the system's SAM/registry. There is no Client Side Extension
that is processing those local security settings, hence no RSOP is being
collected for them. You should be able to get RSOP for the other local
extensions like Admin. Templates, but not at all for security. No known
work-around that I know of-this has been the behavior since XP and is an
acknowledged limitation.
Darren
Darren Mar-Elia
CTO & Founder
SDM Software Inc.
"The Group Policy Experts"
www.sdmsoftware.com
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
neil.ruston@barclayswealth.com
Sent: Wednesday, July 09, 2008 3:45 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RSOP question
Hi,
A RSOP and local policies question from a colleague. Passed on here verbatim
J
Any ideas?
neil
"Do you know of issues using RSOP to see local policy settings (or rather to
see the full RSOP including local settings).
I seem to be getting variable results on both XP and Vista .
(To be honest, in the past I've not had to deal much with local policies as
I've always used Domain GPOs).
The problem I'm seeing is that the RSOP reports (generated locally and via
GPMC) include some references to local policies, but many are not visible
even though GPEDIT shows them as set.
Its not that they are being over-ridden by domain/ou GP settings, its that
the setting doesn't appear in the report at all.
This is particularly true for settings under 'Security Options' for example.
Some settings are showing as defined in "Local Group Policy" e.g. under
Computer Config\Admin templates and Startup & Logon scripts under Windows
Settings\Scripts.
Any thoughts?"
_____
Barclays Wealth is the wealth management division of Barclays Bank PLC. This
email may relate to or be sent from other members of the Barclays Group.
The availability of products and services may be limited by the applicable
laws and regulations in certain jurisdictions. The Barclays Group does not
normally accept or offer business instructions via internet email. Any
action that you might take upon this message might be at your own risk.
This email and any attachments are confidential and intended solely for the
addressee and may also be privileged or exempt from disclosure under
applicable law. If you are not the addressee, or have received this email in
error, please notify the sender immediately, delete it from your system and
do not copy, disclose or otherwise act upon any part of this email or its
attachments.
Internet communications are not guaranteed to be secure or virus-free. The
Barclays Group does not accept responsibility for any loss arising from
unauthorised access to, or interference with, any Internet communications by
any third party, or from the transmission of any viruses. Replies to this
email may be monitored by the Barclays Group for operational or business
reasons.
Any opinion or other information in this email or its attachments that does
not relate to the business of the Barclays Group is personal to the sender
and is not given or endorsed by the Barclays Group.
Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).
Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.
Barclays Bank PLC is authorised and regulated by the Financial Services
Authority.
| | | |
|
|