How to Target Resultant Set of Policy (RSoP) for Users and Computers

The RSoP Snap–in lets you verify policies in effect for a given user or computer, a benefit that allows administrators to quickly assess configurations throughout an organization. RSoP is fully remotable, which means administrators can direct the snap–in to check policies for any computer or user on a domain.

To run the RSoP Snap–in

  1. As Administrator, logon to your domain using Windows XP.

  2. Click Start, Run, and type MMC. The Microsoft Management Console appears.

  3. On the File menu, click Add/Remove Snap–in. When the Add/Remove Snap–in dialog box appears, click Add.

  4. In the Available Standalone Snap-ins dialog box, select Resultant Set of Policy and click Add.

  5. When the RSoP wizard welcome page appears, click Next. When the Mode Selection page appears, click Next.

  6. When the Computer Selection page appears, you can browse for the computer for which you want to display settings. Otherwise the wizard will check RSoP for the computer on which it is being run. Click Next.

  7. When the User Selection page appears, you can choose which user you wish to view policy settings for. (In this example, the administrator chooses the user Cynthia as shown in Figure 1 below.) Click Next.

    Figure 1. Choosing a target user in the RSoP wizard

  8. When the Summary of Selections page appears, click Next. The wizard should reach the completion page. Click Finish. Close the Add Stand alone Snap in dialog box.

  9. On the Add Remove Snap in dialog box, click OK. RSoP results should appear in the console as shown in Figure 2 below.

    Figure 2. RSop results

    You can expand the policy tree in the left pane and navigate to any of the policies that are in effect for the target user. In this example, as shown in Figure 3 below, RSoP shows the user Cynthia is subject to various policies enabled via the GPO Kiosklockdown.

    Figure 3. Viewing enabled policies in RSoP results