Where does the group policy rubber meet the OS road?


  • I am trying to find where certain group policy settings are configured in Windows. The goal here is to point SCCM 2012 to these settings so it can report on which workstations have certain Group Policies applied (using configuration items/baselines).

    A couple examples:

    - For GP item Computer Configuration\Administrative Templates\System\Logon : Do not   process the legacy run list, the Group Policy Settings Reference (, is helpful to connect it to the registry in HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce,


    For other items its not clear where they are set,

    Computer Configuration\Windows Settings\Local Policies\User Rights Assignment : Act as part of the operating system

    The same reference guide says, "User Rights security settings are not registry keys." I also looked at but this too seems to list only registry entries.

    If not in the registry where else are these GP items, e.g., User Rights, set? WMI? In some settings file?

    Maybe there is a better way of getting this sort of compliance reporting on GPs, I am open to suggestions.  I also downloaded the Security Compliance Manager to see if that will work better. 


    • Edited by S-1-18-1 Thursday, September 17, 2015 4:40 PM
    Thursday, September 17, 2015 12:14 AM