locked
GPO report does not match the actual setting RRS feed

  • Question

  • A saved report of a GPO does not match the actual setting, as seen in the attached screenshots.

    Wednesday, June 28, 2017 9:05 PM

Answers

  • What happens when you disable that setting and re-enable it? Does the saved report match the actual gpo after making the change? The saved report should match what's configured in the policy. I've seen this happen when using a remote GPO console (on a windows 7 client) and for some reason it has corrupted the settings and needs to be reapplied via the DC. Isaac
    • Marked as answer by Peter Lee 2 Wednesday, July 5, 2017 10:46 PM
    Wednesday, July 5, 2017 10:29 PM

All replies

  • Hi,

    If you were using RSOP report to view the group policy result, please use gpresult instead.

    Below information is for your reference:

    "Starting with Windows Vista SP1, the Resultant Set of Policies (RSoP) report does not show all Microsoft Group Policy settings (It is no longer updated and has no idea about a great number of policies)."
     
    To see the full set of policy settings applied for a computer/user, it is suggested to use gpresult instead.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, June 29, 2017 6:26 AM
  • I'm just doing a "Save Report" on a 2008R2 DC, as attached screenshot shows. This is not a workstation, this is an export from the DC itself. Is this running some outdated function in the back?

    Thursday, June 29, 2017 4:58 PM
  • Hi,

    This task generates a report in either XML or HTML format that describes properties and policy settings for a specified GPO object. You should run gpresult on the computer and check if the group policy setting has been applied correctly.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, July 3, 2017 8:49 AM
  • This isn't about making sure the policy is applied. This is about keeping a record of the policy as it existed at a point in time.
    Wednesday, July 5, 2017 10:18 PM
  • What happens when you disable that setting and re-enable it? Does the saved report match the actual gpo after making the change? The saved report should match what's configured in the policy. I've seen this happen when using a remote GPO console (on a windows 7 client) and for some reason it has corrupted the settings and needs to be reapplied via the DC. Isaac
    • Marked as answer by Peter Lee 2 Wednesday, July 5, 2017 10:46 PM
    Wednesday, July 5, 2017 10:29 PM
  • Thank you, that did it.
    Wednesday, July 5, 2017 10:46 PM