GPOs not running - 'The user does not have RSOP data&qu. Post by janet thomas » Thu Feb 23, 2006 3:15 pm We have Windows2003 Server SP1 with XP Pro SP1 workstations. Sep 18, 2019 The User Does Not Have Rsop Data. Gp Result The User Does Not Have Rsop Data. The tool itself is very simple to use and I will run through some common examples below. List GPOs Applied with Summary Data Gpresult /r /r Displays RSOP summary data This is pretty useful when you simply want to see what GPOs have applied and in what order.
Rsop Report
I have written a little script that checks and reports what group policies
have been applied to a number of servers.
In short the scripts runs the following command foreach of the servers:
gpresult /S <servername> /U <domainuserid /> /P <password> /SCOPE COMPUTER
/USER <domainuserid>
When I run the script (or gpresult manually) I get the error message:
INFO: The user 'domainuserid' does not have RSOP data.
When I log on locally or via RDP to this server I can run gpresult.
When I log off and rerun the script, the server I have logged on to is
succesful, but the other servers I have not yet logged on to are not.
I figured this would be caused by a lack of a userprofile on the local
computer, so I embeded a psexec -e (the one that creates a profile, not the
newest that avoids creating a profile on the remote computer) command in the
script to create a userprofile on the remote computer before running gpresult
on it.
This did however not work, a userprofile directory was created, but that was
not adequate for gpresult to work correctly. The only difference with loging
on locally or via RDP was that the user did not get its own registrykey under
HKEY_USERS.
It looks like gpresult wants to check the HKEY_USERS<SID of user> to check
for user gpo's applied.
Although I only want to check computer policies, the lack of possiblity to
check user policies for the user is stopping me.
Does anyone know how I can have the userprofile load correctly, including
creating the HKEY_USERSusersid key from a commandline (preferably remote)?
Is there any other way of getting the same info as gpresult /S <servername>
/SCOPE COMPUTER ?
Any help would be appreciated, instead of having to log on interactively at
all my servers.
Greetings,
Jos Rossiau
You login via TeamViewer to it or are there locally as AdminA, you right click Run As Administrator, type in your administative credentials you type in the famous gpresult /R command to get computer GPO's and it's simply not there. Gpresult /R INFO: The user adm.test does not have RSoP data. You try to do it remotely and it fails as well.
When many different GPOs are assigned to a user or a computer, you might have difficulty predicting what policy or preference settings ultimately apply.
To determine what settings apply, run an RSoP Analysis report. An RSoP Analysis report predicts the final result of all the settings that apply to a particular user logged on to a particular computer.
Active Directory assigns GPOs to users and computers. Some of the settings in each GPO may conflict with one another. For example, one setting may enable Remove Desktop icons while another setting may disable the same item. GPA uses a complex algorithm to arrive at the RSoP for a particular user on a particular computer. This algorithm uses the SDOU (Site, Domain, Organizational Unit) hierarchy to evaluate policy.
NOTE:Link order also affects an RSoP. If you configure GPA to retain the existing Active Directory link order, the RSoP Analysis report predicts the RSoP based on the link order in Active Directory, not in the GP Repository. You can change this option on the Customize Options window in the GP Repository database properties.
The following figure illustrates two sites that belong to one domain as well as a number of associated GPOs.
Gpresult Does Not Have Rsop Data Windows 10
The policies or preferences are defined as follows:
A and G are site‑level.
B is domain‑level.
C, D, E, F, and L are OU‑level.
The following table shows the results of two different RSoP analyses using the SDOU hierarchy in the previous diagram.
Rsop Windows 10
OU in which user resides | OU in which computer resides | RSoP: S + D + (OUs) |
|---|---|---|
Marketing | Marketing | A + B + (C + D + L) |
Finance | Finance | G + B + (E + F) |
Do Not Have Rsop Data
The RSoP column of the table shows how the policies or preferences apply, in the order of the SDOU hierarchy. Each level of the hierarchy adds to the next, including GPOs from nested OUs. If any of the GPOs has either a Block Inheritance or Enforced setting, the algorithm processes additional rules to arrive at the RSoP. For more information, see the Microsoft documentation.