Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have applied a GPO to a series of computers on a test network. It applies fine except on one Vista machine that is ignoring it.

The only setting in the GPO is to set Allow Inbound Remote Administration = Enabled

On the Vista system, I opened rsop.msc and looked in Computer Configuration -> Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Domain Profile (and standard), and the State is Enabled, the GPO name is 'Default Domain Policy'

If I then go into CMD and enter gpresult /v, and the results give a USER SETTINGS section only, not a COMPUTER SETTINGS section, so I cannot see what the status is for the GPOs as they affect computers, as I can all other systems. Also netsh firewall show state indicates that:

Profile = Domain
Group Policy Version = Windows Firewall
Remote Admin Mode = Disable
no ports open

The GPO is linked to the a.local domain (my domain) in Group Policy Management, so I cannot guess what is wrong.

Should they be agreeing with each other? Why would it not apply in this case? Why is there no COMPUTER SETTINGS in the gpresult /v output?

share|improve this question
up vote 2 down vote accepted

You need to run the gpresult with an account that has local admin rights from an elevated command prompt to see the computer settings in gpresult /v.

share|improve this answer
Thanks very much ! – TripleAntigen Sep 2 '11 at 5:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.