Friday, 18 January 2008

Group Policy debugging

In the event that you need to track down any issues with Group Policy, your first port of call should be the client machines event log - any issues the local system has when applying the policy will be logged here.

In some cases it may not be clear if a GPO is being applied by the local computer at all - in these cases gpresult.exe is a great help as it tells you which GPOs have been applied, which haven't and why.

Also check the Resultant Set Of Policy reports (add the snap in to an MMC session) for the local machine and user.

No comments: