Reporting group policy settings

On Windows computers, you can use the optional Group Policy Management Console to see the results of group policy settings for a specific computer or user, including Server Suite-managed computers and users.

You can also review the results of group policy settings for a Server Suite-managed computer or a specific user by viewing the gp.report file locally on the computer. This report is automatically updated at each group policy update interval. By default, the gp.report for computer configuration is located in the /var/centrifydc/reg/machine directory and the gp.report for user configuration is located in the /var/centrifydc/reg/users/_username_ directory.

Generating a report of Delinea group policies

Delinea includes a command-line utility on Linux and UNIX systems called adgpresult that you can use to generate a report of all the group policy settings that are in effect for the local computer, the current user, or a specified user.

If you have applied a GPO (group policy object) to a site, domain, or organizational unit that includes a Delinea-managed computer, then you can use the adgpresult command to see all the computer and user configuration policies that have been applied.

The command displays a Resultant Set of Policies similar to the Microsoft Windows gpresult program.

Example usage and options

adgpresult [--all] [--machine] [--user __user_name__]

You can use the following options with this command:

-a, --all | Option displays both the computer and user group policy settings that are in effect for the local computer and the current user account.

-m, --machine | Option displays only the computer group policy settings that are currently in effect on the local computer.

-u, --user | The --user option displays only the user group policy settings that are in effect for the currently logged on user or for the user specified by the user_name argument.

Example:

To report only the computer configuration policies and save the results to a file, you could type a command similar this:

adgpresult --machine \> /tmp/unix-rsop-rhel6