Viewing registry settings of a deleted domain policy

[leigh bennett]

Hi all,

A previous sys admin here had setup a policy for desktops
using the defauly domain policy by mistake. He has
subsequently deleted the policy thinking that would solve
the problem. He reloaded a default domain policy but it
now appears as though none of the policy has been changed
but it is still being rolled out & applied to the desktops.

It appears as though the registry has been tattoo'd and i
cant view any of the settings changes within the policy
because he deleted it.

I plan to do this correctly and apply a group policy but i
need to know what changes he made to the default domain
policy before i can setup a new one.

Does anyone know how i can find out the settings he has
changed?
..

 

[John]

Gpresult.exe is a built-in tool that comes with XP which shows you applied
settings for both user and computer settings. GPMC might also help you.

 

[Leigh Bennett]

Thanks for the reply but unfortunately most of the users
on my network are running W98 or w2k.
When i use the gpresult command in w2k, it only tells me
where the changes have been applied from i.e. default
domain policy.
I need to know exactly what settings are being changed by
the default domain policy.

For example, is it possible to compare a fresh untouched
policy with my tattoo'd policy and output the differences?

 

[John]

Try using "Gpresult /z" it should show applied settings. If the switch is
not "/z" type "Gpresult /?".

W98 clients don't receive group policy are they affected as well? If so,
then you might want to look for config.pol and an ntconfig.pol in the
netlogon share. Don't delete these files if you see them.

Deleting the ntuser.pol (hidding file) from the users profile on the 2k
clients would remove the cached policy settings as well.

 

[Leigh Bennett]

Excellent, that sorted it. You correct about w98, they
dont get affected.

I used the command
GPRESULT /S >>file.txt

Outputted the full locations of all the registry settings.


Thanks again.