523-Disallow Interactive Users from generating Resultant Set of Policy data


Group Policy : Disallow Interactive Users from generating Resultant Set of Policy data

 
Group Policy Supported on :
   At least Microsoft Windows XP Professional or Windows Server 2003 family
Group Policy Explain :
   This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If this setting is enabled, interactive users cannot generate RSoP data. If this setting is not configured or disabled, interactive Users can generate RSoP. Note: This setting does not affect administrators. If this setting is enabled or disabled, by default, administrators can view RSoP data. Note: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc Note: This setting exists as both a User Configuration and Computer Configuration setting. Also, see the Turn off Resultant set of Policy Logging setting in Computer Configuration\Administrative Templates\System\GroupPolicy.
Group Policy Computer/User Node :
   USER
Group Policy Path :
   Administrative Templates\System\Group Policy
  hkcu\software\policies\microsoft\windows\system!denyrsoptointeractiveuser


Enhanced by Zemanta

0 التعليقات:

Post a Comment