Auditing User Group Policy Settings

[Victor The Terrible]

In Novell you can easily print out user settings such as
password length and expiration date among others. Every
time I migrate someone from Novell to AD I get this
question. Surely there is an inexpensive third party tool
to do this in AD (unless there is a way to natively do
this, but I am not aware of any). Has anyone implemented
such a solution that they can recommend?? Thanks in
advance.

 

[Vsevolod Titov [MSFT]]

For Windows 2000 clients you can use gpresult.exe, which comes with the OS.

For Windows XP and Server 2003 you can use have a choice between:

1. gpresult.exe
2. RSOP snap-in which also comes with the OS
3. GPMC. You can download GPMC from Microsoft web site:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

#3 is the most latest and gratest. You can use GPMC for anything related to
group policy, not only for viewing applied policy settings.