Hello,
I have written a little script that checks and reports what group policies
have been applied to a number of servers.
In short the scripts runs the following command foreach of the servers:
gpresult /S <servername> /U <domainuserid /> /P <password> /SCOPE COMPUTER
/USER <domainuserid>
When I run the script (or gpresult manually) I get the error message:
INFO: The user 'domainuserid' does not have RSOP data.
When I log on locally or via RDP to this server I can run gpresult.
When I log off and rerun the script, the server I have logged on to is
succesful, but the other servers I have not yet logged on to are not.
I figured this would be caused by a lack of a userprofile on the local
computer, so I embeded a psexec -e (the one that creates a profile, not the
newest that avoids creating a profile on the remote computer) command in the
script to create a userprofile on the remote computer before running gpresult
on it.
This did however not work, a userprofile directory was created, but that was
not adequate for gpresult to work correctly. The only difference with loging
on locally or via RDP was that the user did not get its own registrykey under
HKEY_USERS.
It looks like gpresult wants to check the HKEY_USERS<SID of user> to check
for user gpo's applied.
Although I only want to check computer policies, the lack of possiblity to
check user policies for the user is stopping me.
Does anyone know how I can have the userprofile load correctly, including
creating the HKEY_USERSusersid key from a commandline (preferably remote)?
Is there any other way of getting the same info as gpresult /S <servername>
/SCOPE COMPUTER ?
Any help would be appreciated, instead of having to log on interactively at
all my servers.
Greetings,
Jos Rossiau