Home / server / Questions / 266464
Accepted
James
Asked: 2011-05-05 15:48:31 +0800 CST

How I can tell if a right is being removed by a remote Group Policy?

  • 772

I need to know how I can tell if a right is being removed by a Group Policy. The right in question is SC_MANAGER_ENUMERATE_SERVICE and is preventing code from opening the Service Control Manager on a remote machine. The application with administrator level privileges on the local computer under a domain level account that has admin privileges on the target server. Both machines are running Window Server 2008 R2 and both firewalls are disabled.

group-policy scm windows-server-2008-r2

1 Answers

  1. Best Answer

    If you have administrative rights on the remote machine, you can use gpresult.exe to generate a full report of all policies applied to the system and/or to a given user.

    gpresult.ext /S <SERVER> /USER <DOMAIN>\<USER> /H <FILENAME>.html

    Will create an HTML report detailing all policies applied to the remote system and to the specified user account whenever it logs on to that system. You can also of course run the command on the system itself, after logging on with your preferred user account; if doing this, then the /S and /USER parameters can be omitted.

    • 1