Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to make sure that certain users are available in a group from the windows domain. I installed "Group Policy Management" and can open the Forest, the Domain. But then I am not sure what I am searching. I can select a link to a Group Policy Object (GPO). In Settings i see the Drive Maps and I know them. But how can I display a list of users that use this GPO? Right-click, Edit... is disabled.

net group my_gpo

does not work since I am not on a Windows Domain Controller. Any possibility to find out anyway?

share|improve this question

migrated from superuser.com Feb 7 '11 at 14:09

This question came from our site for computer enthusiasts and power users.

2 Answers 2

The greyed out Edit button may be caused by rights issue, make sure that you have the correct permissions to edit the GPO.

To see the users who'll be affected by this GPO, check the "security filetering" groups. the users in that group should be affected by your GPO (provided the're in the correct linked OU)

share|improve this answer
    
To follow up on @Florent's comment, I have this issue all the freakin' time with Windows 7 RSAT GPMC implementation. The functional level of the domain is irrelevant; the GPMC, when looking at linked GPOs, has an issue. This might be because our GPO's cross a domain trust, but every link GPO I try to "edit" from its linked location fails with an access denied error. I have to open it from its original container as far as the GPMC GUI is concerned. Anyone else have this issue? It worked before with GPMC in XP. –  ajstein Feb 7 '11 at 15:00

It's not totally clear to me what you're asking but in the GPMC you can select the GPO in the left pane and see where it's linked on the Scope tab in the right pane and see what security filtering is being applied to the GPO. Based on that information you can deduce which users will have this policy applied based on their location in your AD structure and what security groups they're members of (are they in the Site, Domain, or OU where the GPO is linked and are they in a group that is being used to filter the GPO).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.