Viewing effective settings

[Dave Clausen]

After coming up empty after a good bit of research, I
think I may be asking the wrong question ... but I'll ask
it anyway.

How can I view Effective Settings on a particular Win2K
computer for such settings as Event Log, System Services,
Registry, File System?

Using GPEdit and selecting Local Computer Policy shows
Effective Settings for the computer, but not the above
settings.

Using GPEdit and selecting the Domain or OU GPO shows the
above settings, but not the Effective Settings for the
computer.

Thanks!

 

[Robert Cohen]

how about gpresult? or is that just winxp

 

[Steven L Umbach]

You could try using secedit /export /mergedpolicy or use the Security Configuration
and Analysis mmc snapin by doing an analysis against the setup security.inf template
and viewing the results. --- Steve

http://www.lokbox.net/SecureXP/secAnalysis.asp

 

[Jordan]

If your clients are on XP, GPMC and RSoP.msc will be the tools to use
for Win2K use 'gpresult /v'

 

[Dave Clausen]

Thanks all.

My client has Win2K, but I searched for GPMC (Group
Policy Management Console) for XP just for fun, and am
now downloading it from MS.

 

[Jordan]

Even if your domain is on Windows 2000, you can still use GPMC to manage it,
althought there are a few restriction (you can't use Modeling and some other
stuff).

Once you switch to GPMC, guarantee you that you won't ever switch to Win2K
ways of managing Group Policy