Assuming its XP, then you can use GPMC to get a GP Results report that tells you what GPOs and what settings were applied to a given user or computer. However, I think what you're asking is, is there any log that tells you when a particular operation gets blocked by a particular GPO setting, and the answer to that is no. Depending upon what the operation is, you may be able to see what registry values are getting queried (assuming it's an admin. Template policy that is causing the problem) by using Sysinternals Regmon to spy on the registry I/O while you are doing the particular operation described below. However, outside of that its trial and error to find why the operation is getting stopped.
Darren Darren Mar-Elia For comprehensive Windows Group Policy Information, check out www.gpoguy.com-- the best source for GPO FAQs, video training, tools and whitepapers. Also check out the Windows Group Policy Guide, the definitive resource for Group Policy information. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ernesto Nieto Sent: Monday, August 21, 2006 8:05 AM To: [email protected] Subject: [ActiveDir] Viewing GPO processing Is there anyway to see when a GPO is being applied. Is there a log somewhere that shows what was applied and what wasn't? Like the log that's created when one logs into w2k in safe mode. In that log, you can see what drivers are loaded. I need to see what policy is causing an error when users log on. The error is about installing an .INF file, access is denied. Thank you List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
