ActiveXperts Network Monitor
Monitor servers, workstations, devices and applications in your network

Quicklinks

Group Policy Scripts

Enumerating Resultant Set of Policy Security Event Log Settings -- Boolean
Enumerating Resultant Set of Policy Security Event Log Settings -- Numeric
Enumerating Resultant Set of Policy Scopes of Management
Enumerating Resultant Set of Policy Security Settings -- Boolean
Enumerating Resultant Set of Policy Security Settings -- Numeric
Enumerating Resultant Set of Policy System Services
List RSOP Application Management Policy Settings
List RSOP Sessions
List Resultant Set of Policy Audit Policies
List Resultant Set of Policy Administrative Template Files
List Resultant Set of Policy Group Policy Extension Status
List Resultant Set of Policy Group Policy Links
List Resultant Set of Policy GPOs
List Resultant Set of Policy Policy Settings
List Resultant Set of Policy User Privilege Rights

You can use any of the VBScript programs below in ActiveXperts Network Monitor. Click here for an explanation about how to include scripts in ActiveXperts Network Monitor.


Enumerating Resultant Set of Policy Security Event Log Settings -- Boolean


Returns information about access to event logs assigned by using Group Policy.
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_SecurityEventLogSettingBoolean")

For Each objItem in colItems
    Wscript.Echo "Key Name: " & objItem.KeyName
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Setting: " & objItem.Setting
    Wscript.Echo "Type: " & objItem.Type
    Wscript.Echo
Next

Enumerating Resultant Set of Policy Security Event Log Settings -- Numeric


Returns information about event log settings (such as maximum log size) assigned by using Group Policy
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_SecurityEventLogSettingNumeric")

For Each objItem in colItems
    Wscript.Echo "Key Name: " & objItem.KeyName
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Setting: " & objItem.Setting
    Wscript.Echo "Type: " & objItem.Type
    Wscript.Echo
Next

Enumerating Resultant Set of Policy Scopes of Management


Returns information about the Scope of Management (SOM) used in applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_SOM")

For Each objItem in colItems
    Wscript.Echo "ID: " & objItem.ID
    Wscript.Echo "Blocked: " & objItem.Blocked
    Wscript.Echo "Blocking: " & objItem.Blocking
    Wscript.Echo "Reason: " & objItem.Reason
    Wscript.Echo "SOM Order: " & objItem.SOMOrder
    Wscript.Echo "Type: " & objItem.Type
    Wscript.Echo
Next

Enumerating Resultant Set of Policy Security Settings -- Boolean


Returns information about account policy settings (such as password policy settings and account lockout policy settings) assigned by using Group Policy. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_SecuritySettingBoolean")

For Each objItem in colItems
    Wscript.Echo "Key Name: " & objItem.KeyName
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Setting: " & objItem.Setting
    Wscript.Echo
Next

Enumerating Resultant Set of Policy Security Settings -- Numeric


Returns information about account policy settings assigned by using Group Policy. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_SecuritySettingNumeric")

For Each objItem in colItems
    Wscript.Echo "Key Name: " & objItem.KeyName
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Setting: " & objItem.Setting
    Wscript.Echo
Next

Enumerating Resultant Set of Policy System Services


Returns information about the service settings (including startup mode and access permissions) assigned to a computer by using Group Policy. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_SystemService")

For Each objItem in colItems
    Wscript.Echo "Service: " & objItem.Service
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "SDDL String: " & objItem.SDDLString
    Wscript.Echo "Startup Mode: " & objItem.StartupMode
    Wscript.Echo
Next

List RSOP Application Management Policy Settings


Returns information about application management extension policies assigned to a computer by using Group Policy. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_ApplicationManagementPolicySetting")

For Each objItem in colItems  
    Wscript.Echo "Allow X86 on IA64: " & objItem.AllowX86OnIA64
    Wscript.Echo "Application ID: " & objItem.ApplicationId
    Wscript.Echo "Apply Cause: " & objItem.ApplyCause
    Wscript.Echo "Assignment Type: " & objItem.AssignmentType
    Wscript.Echo "Categories: " & objItem.Categories
    Wscript.Echo "Demand Installable: " & objItem.DemandInstallable
    Wscript.Echo "Deployment Last Modify Time: " & _
        objItem.DeploymentLastModifyTime
    Wscript.Echo "Deployment Type: " & objItem.DeploymentType
    Wscript.Echo "Display in Add/Remove Programs: " & objItem.DisplayInARP
    Wscript.Echo "Eligibility: " & objItem.Eligibility
    Wscript.Echo "Entry Type: " & objItem.EntryType
    Wscript.Echo "ID: " & objItem.ID
    Wscript.Echo "Ignore Language: " & objItem.IgnoreLanguage
    Wscript.Echo "Installation UI: " & objItem.InstallationUI
    Wscript.Echo "Language ID: " & objItem.LanguageId
    Wscript.Echo "Language Match: " & objItem.LanguageMatch
    Wscript.Echo "Loss of Scope Action: " & objItem.LossOfScopeAction
    For Each strArchitecture in objItem.MachineArchitectures
        Wscript.Echo "Machine Architecture: " & strArchitecture
    Next
    Wscript.Echo "On-demand CLSID: " & objItem.OnDemandClsid
    Wscript.Echo "On-demand File Extension: " & objItem.OnDemandFileExtension
    Wscript.Echo "On-demand ProgID: " & objItem.OnDemandProgId
    Wscript.Echo "Package Location: " & objItem.PackageLocation
    Wscript.Echo "Package Type: " & objItem.PackageType
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Precedence Reason: " & objItem.PrecedenceReason
    Wscript.Echo "Product ID: " & objItem.ProductId
    Wscript.Echo "Publisher: " & objItem.Publisher
    Wscript.Echo "Redeploy Count: " & objItem.RedeployCount
    Wscript.Echo "Removal Cause: " & objItem.RemovalCause
    Wscript.Echo "Removal Type: " & objItem.RemovalType
    Wscript.Echo "Removing Application: " & objItem.RemovingApplication
    Wscript.Echo "Replaceable Applications: " & objItem.ReplaceableApplications
    Wscript.Echo "Script File: " & objItem.ScriptFile
    Wscript.Echo "Support URL: " & objItem.SupportURL
    Wscript.Echo "Transforms: " & objItem.Transforms
    Wscript.Echo "Uninstall Unmanaged: " & objItem.UninstallUnmanaged
    Wscript.Echo "Upgradeable Applications: " & objItem.UpgradeableApplications
    Wscript.Echo "Upgrade Settings Mandatory: " & _
        objItem.UpgradeSettingsMandatory
    Wscript.Echo "Version Number (High): " & objItem.VersionNumberHi
    Wscript.Echo "Version Number (Low): " & objItem.VersionNumberLo
    Wscript.Echo
Next

List RSOP Sessions


Returns information about the resultant set of policy session used when applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user.
Set dtmConvertedDate = CreateObject("WbemScripting.SWbemDateTime")
 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_Session")

For Each objItem in colItems
    Wscript.Echo "ID: " & objItem.ID
    dtmConvertedDate.Value = objItem.CreationTime
    dtmTime = dtmConvertedDate.GetVarDate
    Wscript.Echo "Creation Time: " & dtmTime 
    Wscript.Echo "Flags: " & objItem.Flags
    For Each strSecurityGroup in objItem.SecurityGroups
        Wscript.Echo "Security group: " & strSecurityGroup
    Next
    Wscript.Echo "Site: " & objItem.Site
    Wscript.Echo "Slow Link: " & objItem.SlowLink
    Wscript.Echo "SOM: " & objItem.SOM
    Wscript.Echo "Target Name: " & objItem.TargetName
    Wscript.Echo "TTL (Minutes): " & objItem.TTLMinutes
    Wscript.Echo "Version: " & objItem.Version
    Wscript.Echo
Next

List Resultant Set of Policy Audit Policies


Returns information about auditing privileges assigned by using Group Policy.
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_AuditPolicy")

For Each objItem in colItems  
    Wscript.Echo "Category: " & objItem.Category
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "Failure: " & objItem.Failure
    Wscript.Echo "Success: " & objItem.Success
    Wscript.Echo
Next

List Resultant Set of Policy Administrative Template Files


Returns information about the administrative template files (.ADM files) used in applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user.
Set dtmConvertedDate = CreateObject("WbemScripting.SWbemDateTime")
 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery _
    ("Select * from RSOP_AdministrativeTemplateFile")

For Each objItem in colItems  
    Wscript.Echo "GPO ID: " & objItem.GPOID
    dtmConvertedDate.Value = objItem.LastWriteTime
    dtmCreationTime = dtmConvertedDate.GetVarDate
    Wscript.Echo "Last Write Time: " & dtmCreationTime 
    Wscript.Echo "Name: " & objItem.Name
    Wscript.Echo
Next

List Resultant Set of Policy Group Policy Extension Status


Returns information about client-side processing of Group Policy extensions. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user.
On Error Resume Next
Set dtmConvertedDate = CreateObject("WbemScripting.SWbemDateTime")
 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_ExtensionStatus")

For Each objItem in colItems  
    Wscript.Echo "Display name: " & objItem.DisplayName
    dtmConvertedDate.Value = objItem.BeginTime
    dtmTime = dtmConvertedDate.GetVarDate
    Wscript.Echo "Begin time: " & dtmTime
    dtmConvertedDate.Value = objItem.EndTime
    dtmTime = dtmConvertedDate.GetVarDate
    Wscript.Echo "End time: " & dtmTime
    Wscript.Echo "Error: " & objItem.Error
    Wscript.Echo "Extension GUID: " & objItem.ExtensionGuid
    Wscript.Echo "Logging Status: " & objItem.LoggingStatus
    Wscript.Echo
Next

List Resultant Set of Policy Group Policy Links


Returns information about Group Policy links used in applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_GPLink")

For Each objItem in colItems
    Wscript.Echo "GPO: " & objItem.GPO
    Wscript.Echo "Applied Order: " & objItem.AppliedOrder
    Wscript.Echo "Enabled: " & objItem.Enabled
    Wscript.Echo "Link Order: " & objItem.LinkOrder
    Wscript.Echo "No Overrride: " & objItem.NoOverride
    Wscript.Echo "SOM Order: " & objItem.SOMOrder
    Wscript.Echo
Next

List Resultant Set of Policy GPOs


Returns information about Group Policy Objects used in applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_GPO")

For Each objItem in colItems  
    Wscript.Echo "Name: " & objItem.Name
    Wscript.Echo "GUID Name: " & objItem.GUIDName
    Wscript.Echo "ID: " & objItem.ID
    Wscript.Echo "Access Denied: " & objItem.AccessDenied
    Wscript.Echo "Enabled: " & objItem.Enabled
    Wscript.Echo "File System path: " & objItem.FileSystemPath
    Wscript.Echo "Filter Allowed: " & objItem.FilterAllowed
    Wscript.Echo "Filter ID: " & objItem.FilterId
    Wscript.Echo "Version: " & objItem.Version
    Wscript.Echo
Next

List Resultant Set of Policy Policy Settings


Returns information about policy object settings used in applying Group Policy to a computer. To return information about Group Policy applied to the logged-on user, change the WMI class from root\rsop\computer to root\rsop\user. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_PolicySetting")

For Each objItem in colItems
    Wscript.Echo "GPO ID: " & objItem.GPOID
    Wscript.Echo "ID: " & objItem.ID
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "SOM ID: " & objItem.SOMID
    Wscript.Echo
Next

List Resultant Set of Policy User Privilege Rights


Returns information about user privileges assigned by using Group Policy. 
strComputer = "."
Set objWMIService = GetObject _
    ("winmgmts:\\" & strComputer & "\root\rsop\computer")

Set colItems = objWMIService.ExecQuery("Select * from RSOP_UserPrivilegeRight")

For Each objItem in colItems
    For Each strAccountList in objItem.AccountList
        Wscript.Echo "Account list: " & strAccountList
    Next
    Wscript.Echo "Precedence: " & objItem.Precedence
    Wscript.Echo "User Right: " & objItem.UserRight
    Wscript.Echo
Next