none
View RSOP data for logged on user that is not administrator RRS feed

  • Question

  • When troubleshooting group policies I use GPResult and RSOP.msc a LOT!  Since we started deploying Windows 7 I've been having the worst time trying to use these utilities.

    Normally when a user is not getting policies I can just run rsop.msc and see if there is any error information as well as which policies have and have not applied.  In Windows 7 I am prompted for an Admin password when I run rsop.  Well that would be fine but now RSOP attempts to gather data for the administrator; I need to see the data for the logged on user.  The only way I've been able to work around this so far is to add the user to the local admin group then I can run rsop and gpresult.  When I'm done I have to remove them from the admin group.

    This seems silly to me.  Can anyone tell me how to see RSOP and GPResult data as the USER instead of the Admin.

    Also please do not chime in telling me to run rsop in planning mode as that only tells me what is supposed to happen, not what is actually happening on the system.

    Thursday, May 5, 2011 2:46 PM

Answers

  • Hi,

     

    Base on my test and research, there’s impossible to use RSOP.msc with user, and run as administrator when you login with user still doesn’t work.

     

    That’s necessary to login with administrator and run rsop.msc. It’s a by design feature.

     

    Thank you for your understanding.

     

     

    Regards,

    Leo   Huang

     

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, May 9, 2011 3:07 AM
    Moderator

All replies

  • Hi,

     

    Base on my test and research, there’s impossible to use RSOP.msc with user, and run as administrator when you login with user still doesn’t work.

     

    That’s necessary to login with administrator and run rsop.msc. It’s a by design feature.

     

    Thank you for your understanding.

     

     

    Regards,

    Leo   Huang

     

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, May 9, 2011 3:07 AM
    Moderator
  • In the GPMC you should still be able to use the GPResults to get applied Group Policy settings for a specific user (not just the logged on user)
    Lee Bowman MCITP MCTS
    Monday, May 9, 2011 10:55 AM
  • In Windows 7, you can run RSOP.msc as a logged on user who is not an administrator, however it will only show the user applied policy settings and not the ones applied to the computer. To see the ones applied to the computer you would need to run it as an Administrator.


    • Edited by Richard Whitcher Wednesday, September 28, 2011 1:33 PM
    • Proposed as answer by Aung Htet Friday, April 12, 2013 2:54 AM
    • Unproposed as answer by Aung Htet Friday, April 12, 2013 2:54 AM
    Wednesday, September 28, 2011 1:33 PM
  • To get what you need, navigate to %systemroot%\system32.  Find the MMC.exe and hold the Shift key and right-click and select the "Run as different user" the add the "Resultant Set of Policy," click Add button then OK.  To run the rsop.msc right-click on the "Resultant Set of Policy," select Generate RSoP Data, click Next, verify logging mode then Next, verify "This Computer" is selected then Next, you can then select the current user if you're logged in as the user you want to see the policy for or select a specific user from the list and click Next, verify your selections and click Next.  The "Answer" selected here is incorrect.
    • Proposed as answer by juls94 Monday, October 27, 2014 7:35 PM
    Monday, October 27, 2014 7:35 PM
  • This is exactly what I needed.  Thanks!
    • Proposed as answer by Kendalji Thursday, October 26, 2017 7:42 PM
    Thursday, October 26, 2017 7:42 PM
  • This is the best answer.. perfectly working, time saving for admins. Thank you.
    Tuesday, September 11, 2018 3:40 PM
  • Leo,

    After starting RSOP.MSC the script defaults to the current account & device. However, once you're in the RSOP display, use the Action/context menu to Change Query. You can now select device & account.

    Adrian

    Friday, July 5, 2019 12:57 PM
  • To shortcut your answer - RSOP.MSC script defaults to the current account & device. However, once you're in the RSOP display, use the Action/context menu to Change Query. You can now select device & account.

    Adrian

    Friday, July 5, 2019 2:32 PM