Group Policy question

Hi All,
A quick question. Do you use RSOP to see where in the registry a change is made? Iam looking into the differences with RSOP and gpresult. Iam thinking that RSOP shows where in the registry the chane applies to but gpresult does not.
Thanks!
A quick question. Do you use RSOP to see where in the registry a change is made? Iam looking into the differences with RSOP and gpresult. Iam thinking that RSOP shows where in the registry the chane applies to but gpresult does not.
Thanks!
Comments
I believe you use the Security Configuration and Analysis MMC snap-in to compare templates. You can also use the secedit.exe command to compare templates.
start > run > type Rsop.msc
Gpresult.exe is designed to do the same it shows the polices in effect on the machine its run on however its a command line tool.
Both differ from Gpedit in that they show a cumulative result of policies in effect i.e a user may be in a number of groups with a number of policies in effect where as Gpedit is aimed at viewing/editing selected polices.
Also from what i have read secedit has been replaced by gpupdate in both XP and 2003 server.
I haven't done my 70-270 exam yet so if some one who has can confirm this, i may be wrong
I think you would have found that gpedit.exe doesn't work as a command from c:\ unless you replace .exe with .msc then you will be greeted with a gui.
run from the run line as gpedit.msc gives you a gui, and you are right, it is geared at viewing/editing group policy.
gpresult /v command will give you verbose information on RSoP in a command line interface. RSoP.msc from run is gpresult (with whatever switch you use), just in gui format.
Security Configuration and Analysis Tool is used to make comparisons between templates.
gpudate only replaces secedit /refreshpolicy
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/secedit_cmds.mspx