A. You can use Gpotool, which is included in the Windows 2003 Resource Kit tools (http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en ), to perform a check of the local user's home domain policies. To use the tool, open a command line and type
Gpotoolwhich, on my machine displays the following sample output:
Validating DCs... Available DCs: SAVDALDC01.savilltech.com Searching for policies... Found 2 policies Policy \{31B2F340-016D-11D2-945F-00C04FB984F9\} Friendly name: Default Domain Policy Policy OK Policy \{6AC1786C-016F-11D2-945F-00C04FB984F9\} Friendly name: Default Domain Controllers Policy Policy OKYou can use Gpotool with the /verbose switch to get more detailed information, and you can select a specific domain, domain controller (DC), and GPO by using the /domain, /dc, and /gpo switches, respectively. By default, the tool checks all GPOs on all DCs for consistency between the information stored in AD and the information in the template within SYSVOL. This is a great tool to use to check the general health of your Group Policy environment.
0 comments
Hide comments