1 00:00:07,800 --> 00:00:14,550 To help you analyze the cumulative effect of GPOs in policy settings on a user or computer in your organization. 2 00:00:14,550 --> 00:00:17,730 The PMC includes group policy results wizard. 3 00:00:18,600 --> 00:00:24,180 If you want to understand exactly which policy settings apply to a user or a computer and why they were 4 00:00:24,180 --> 00:00:31,560 applied then group policy results Wizard is the tool to use generating our SLP reports with Group Policy 5 00:00:31,560 --> 00:00:32,520 Results Wizard. 6 00:00:33,360 --> 00:00:34,680 Group Policy Results. 7 00:00:34,680 --> 00:00:40,740 Wizard can reach into the WMI provider on a local or remote computer that is running Windows Vista or 8 00:00:40,740 --> 00:00:42,150 newer operating systems. 9 00:00:43,050 --> 00:00:48,360 The WMI provider can report everything there is to know about the way group policy was applied to the 10 00:00:48,360 --> 00:00:48,840 system. 11 00:00:49,650 --> 00:00:55,530 It can report when processing occurred, which GPOs were applied, which GPOs were not applied, and 12 00:00:55,530 --> 00:01:01,110 why errors that were encountered, and the exact policy settings in source GPOs that took precedence. 13 00:01:02,070 --> 00:01:08,370 Several requirements for running group policy results wizard are as follows The target computer must 14 00:01:08,370 --> 00:01:09,120 be online. 15 00:01:09,930 --> 00:01:12,990 You must have administrative credentials on the target computer. 16 00:01:13,860 --> 00:01:18,420 The Target computer must be running a Windows XP or newer operating system. 17 00:01:19,260 --> 00:01:22,620 You must be able to access WMI on the target computer. 18 00:01:23,490 --> 00:01:28,730 This means that the computer must be online, connected to the network and accessible through ports 19 00:01:28,740 --> 00:01:31,920 135 and 445. 20 00:01:32,790 --> 00:01:36,930 Note performing our SOP analysis by using group policy results. 21 00:01:36,930 --> 00:01:39,900 Wizard is just one example of remote administration. 22 00:01:40,710 --> 00:01:45,720 To perform remote administration, you might need to configure inbound rules for the firewall that your 23 00:01:45,720 --> 00:01:47,160 clients and servers use. 24 00:01:48,160 --> 00:01:51,600 You must have started the WMI service on the Target computer. 25 00:01:52,480 --> 00:01:57,880 If you want to analyze our soap for a user, that user must have signed in at least once to the computer. 26 00:01:58,750 --> 00:02:03,940 It is not necessary for the user to be signed in at the moment you run the group policy results wizard. 27 00:02:04,780 --> 00:02:10,870 After the requirements have been met, you are ready to run an ah soapy analysis to run an hour soap 28 00:02:10,870 --> 00:02:11,380 report. 29 00:02:12,250 --> 00:02:18,190 One right click group policy results in the Group Policy Management Console Tree and then click group 30 00:02:18,190 --> 00:02:22,180 policy results Wizard to Group Policy Results. 31 00:02:22,180 --> 00:02:24,230 Wizard prompts you to select a computer. 32 00:02:25,090 --> 00:02:30,400 It then connects to the WMI provider on that computer and provides a list of users that have signed 33 00:02:30,400 --> 00:02:30,910 into it. 34 00:02:31,780 --> 00:02:37,570 You then can select one of the users, or you can skip our soap analysis for user configuration policies. 35 00:02:38,480 --> 00:02:39,020 Three. 36 00:02:39,050 --> 00:02:45,230 Group Policy Results Wizard produces a detailed R soap report in dynamic HTML format. 37 00:02:46,100 --> 00:02:51,740 If you have configured Microsoft Internet Explorer enhanced security configuration, you will be prompted 38 00:02:51,740 --> 00:02:54,500 to allow the console to display the dynamic content. 39 00:02:55,400 --> 00:03:00,740 You can expand or collapse each section of the report by clicking the show or hide links or by double 40 00:03:00,740 --> 00:03:02,210 clicking the heading of the section. 41 00:03:03,020 --> 00:03:05,180 The report is displayed on three tabs. 42 00:03:06,100 --> 00:03:06,760 Summary. 43 00:03:07,630 --> 00:03:12,220 The summary tab displays the status of group policy processing at the last refresh. 44 00:03:13,090 --> 00:03:18,610 You can identify information that was collected about the system, the GPOs that were applied and denied, 45 00:03:18,730 --> 00:03:24,550 security group membership that might have affected GPOs filtered with security groups, WMI filters 46 00:03:24,550 --> 00:03:27,730 that were analyzed and the status of client side extensions. 47 00:03:28,670 --> 00:03:29,300 Settings. 48 00:03:30,170 --> 00:03:34,610 The Settings tab displays the R soap settings applied to the computer or user. 49 00:03:35,480 --> 00:03:40,700 This tab shows you exactly the settings that are applied to the user and or computer through the effects 50 00:03:40,700 --> 00:03:42,560 of your group policy implementation. 51 00:03:43,400 --> 00:03:48,830 You can access a large amount of information from the Settings tab, although some data is not reported, 52 00:03:48,830 --> 00:03:52,610 including IP, sec, wireless and disk quota policy settings. 53 00:03:53,490 --> 00:03:54,540 Policy events. 54 00:03:55,470 --> 00:04:00,660 The Policy Events TAB displays group policy events from the event logs of the target computer. 55 00:04:01,550 --> 00:04:01,880 For. 56 00:04:01,880 --> 00:04:07,640 After you generate an R SOP report with group policy results Wizard Right Click the report to rerun 57 00:04:07,640 --> 00:04:14,840 the query, print the report or save the report as an XML file or an HTML file that maintains the dynamic 58 00:04:14,840 --> 00:04:16,580 expanding and collapsing sections. 59 00:04:17,480 --> 00:04:24,140 You can open both file types with Internet Explorer, so the RCP report is portable outside the PMC. 60 00:04:24,950 --> 00:04:30,110 If you right click the note of the report itself under the group policy results note in the console 61 00:04:30,110 --> 00:04:32,300 tree you can switch to advanced view. 62 00:04:33,110 --> 00:04:39,470 In Advanced View our soap displays by using the R soap snap-on which exposes all the applied settings 63 00:04:39,470 --> 00:04:42,890 including IP seg, wireless and disk quota policies. 64 00:04:43,790 --> 00:04:47,240 Generating our soap reports by using GP results. 65 00:04:47,260 --> 00:04:49,910 EFC The GP results. 66 00:04:50,120 --> 00:04:53,990 EMC Command is the command line version of group policy results. 67 00:04:53,990 --> 00:05:01,040 Wizard GP Result uses the same WMI provider as the Wizard and produces the same information. 68 00:05:01,880 --> 00:05:04,820 You can even use it to create the same graphical reports. 69 00:05:05,690 --> 00:05:07,970 GP Result runs on Windows Vista. 70 00:05:08,000 --> 00:05:08,960 Windows seven. 71 00:05:08,960 --> 00:05:09,830 Windows eight. 72 00:05:09,830 --> 00:05:11,270 Windows 8.1. 73 00:05:11,270 --> 00:05:12,170 Windows ten. 74 00:05:12,350 --> 00:05:14,000 Windows Server 2008. 75 00:05:14,210 --> 00:05:18,080 Windows Server 2008 or to Windows Server 2012. 76 00:05:18,110 --> 00:05:22,550 Windows Server 2012 R2 and Windows Server 2016. 77 00:05:23,390 --> 00:05:27,680 When you run the GP Result Command, you are likely to use the following options. 78 00:05:28,580 --> 00:05:33,110 Each option is followed by its description slash s computer name. 79 00:05:33,950 --> 00:05:37,940 This option specifies the name or IP address of a remote system. 80 00:05:38,780 --> 00:05:45,380 If you use a dot dot as the computer name or do not include the slash s option, the RCP analysis is 81 00:05:45,380 --> 00:05:50,180 performed on the local computer slash scope user computer. 82 00:05:51,080 --> 00:05:54,830 This displays are so p analysis for user or computer settings. 83 00:05:55,730 --> 00:06:03,200 If you want the slash scope option, RCP analysis includes both user and computer settings slash user 84 00:06:03,200 --> 00:06:03,890 username. 85 00:06:04,730 --> 00:06:08,780 This specifies the name of the user for which you want to display our soap data. 86 00:06:09,660 --> 00:06:10,500 Slash R. 87 00:06:11,400 --> 00:06:14,160 This option displays a summary of our soapy data. 88 00:06:15,060 --> 00:06:15,960 Slash V. 89 00:06:16,830 --> 00:06:21,660 This option displays verbose r so p data which presents the most meaningful information. 90 00:06:22,530 --> 00:06:23,460 Slash Z. 91 00:06:24,300 --> 00:06:29,550 This displays additional verbose data, including the details of all policy settings applied to the 92 00:06:29,550 --> 00:06:30,030 system. 93 00:06:30,870 --> 00:06:35,640 Often this is more information than you will require for typical group policy troubleshooting. 94 00:06:36,480 --> 00:06:39,750 Slash your domain backslash user slash password. 95 00:06:40,620 --> 00:06:46,710 This provides credentials that are in the administrators group of a remote system without these credentials. 96 00:06:47,190 --> 00:06:50,370 Result runs by using the credentials that you used to sign in. 97 00:06:51,240 --> 00:06:52,080 Slash X. 98 00:06:52,350 --> 00:06:53,820 Slash H file name. 99 00:06:54,660 --> 00:06:58,800 This option saves the reports in XML or HTML format. 100 00:06:59,670 --> 00:07:02,670 Troubleshooting Group Policy with group policy results. 101 00:07:02,670 --> 00:07:05,190 Wizard or result dot xy. 102 00:07:06,030 --> 00:07:11,280 As an administrator, you likely will encounter scenarios that require group policy troubleshooting. 103 00:07:12,120 --> 00:07:18,210 You might need to diagnose and solve problems, including GPOs are not being applied at all. 104 00:07:19,080 --> 00:07:22,950 The recipes for a computer or user are not what was expected. 105 00:07:23,820 --> 00:07:30,390 Group policy results wizard and result dot EMC often will provide the most valuable insight into group 106 00:07:30,390 --> 00:07:32,940 policy processing and application problems. 107 00:07:33,810 --> 00:07:39,990 Remember that these tools examine the WMI r soap provider to report exactly what happened on a system. 108 00:07:40,800 --> 00:07:46,890 Examining the RCP report often will point you to GPOs that are scoped incorrectly or policy processing 109 00:07:46,890 --> 00:07:49,980 errors that prevented the application of GPO settings. 110 00:07:50,880 --> 00:07:54,060 Using Windows PowerShell to manage our soapie reports. 111 00:07:54,960 --> 00:07:58,140 You also can use Windows PowerShell to manage our soapie. 112 00:07:58,980 --> 00:08:03,900 You use the get cheaper result and set off policy collect to generate our soapie reports. 113 00:08:04,800 --> 00:08:11,190 For example, the following command generates a report for the specified computer, a date, incom backslash, 114 00:08:11,190 --> 00:08:17,220 l0 and cl1 and user alan in HTML format and saves it to the specified file. 115 00:08:18,140 --> 00:08:24,110 Get present tense at a pharmacy user alan computer a datum backslash yellow and seal one report type 116 00:08:24,110 --> 00:08:28,220 h html path c colon backslash report html.