- The User Does Not Have Rsop Data Windows 7
- The User Does Not Have Rsop Data Trusted Domain
- Powershell Error Rsop Data
Want an insanely easy way to troubleshoot and report group policy settings for users and computers? Then you’ll love this guide.
This cmdlet does not take any object as input. This cmdlet returns an RSoP object. This cmdlet provides only the logging results for a specified computer and user. You must use the GPMC to generate RSoP modeling information. In the console window right click on Resultant Set of Policy and click on Generate RSoP data to open the RSoP Wizard. Click Next and select the radio button next to Planning mode. Select the container or object that you wish to simulate with.
Look:
Having multiple group policy objects can get out of control and difficult to troubleshoot.
When deploying GPOs, you need to consider:
Group policy settings can overlap
Moving a user or computer to another OU can affect what policies are getting applied
GPO ordering and precedence
User settings vs computer settings
So how exactly do you report what settings are getting applied?
It’s easy just follow the steps in this guide.
Bonus: I will also show you how to simulate group policy settings. It’s great for planning GPOs.
I also recommend you check out my list of Group Policy Best practices. It contains some great tips and recommendations for group policy design and implementation
A quick overview of RsoP (Resultant Set of Policy)
RsoP (Resultant Set of Policy) is a Microsoft tool that is built into Windows 7 and later versions. It provides administrators a report on what group policy settings are getting applied to users and computers. It can also be used to simulate settings for planning purposes.
RsoP is one of my favorite Active Directory Troubleshoot Tools for testing and troubleshooting group policy settings at the client level.
RsoP (Resultant Set of Policy) has two modes, Logging Mode and Planning mode.
Logging Mode:
This mode is used to generate a report on policy settings for users and computers. It is best used to verify and troubleshoot group policy settings.
Planning Mode:
Administrators can use planning mode for “what if” scenarios. What if I move a user or computer to a different OU, what if I put a user in a different AD group, what if the user logs into a different computer. You can select various options with planning mode and it will simulate the policy settings.
This was just a quick overview of RsoP (Resultant Set of Policy) for more details see Microsoft’s article What is Resultant Set of Policy.
Now to the good stuff:
How to run RSoP to determine computer and user policy settings
You must be a local administrator on the local computer for RsoP to return the computer configuration policy settings.
Step 1: Run rsop.msc from a local computer
Open the command line, type rsop.msc and hit enter.
Rsop will run and generate a report for the user and computer policy settings.
Step 2: Review Policies
Now that RSoP has run its time to review the policy settings. Keep in mind, RsoP will only show the policy settings, it will not show the group policy objects.
Browse through the policies to see what settings are applied.
Step 3: Compare the results to the group policy objects
Now it’s time to go back to the Group Policy Management console and verify that the policies that you have linked are getting applied.
I have a GPO called “Computer – Windows 10 Settings” that is applied to the Winadpro Computers OU. I’m logged into PC1 which is in the accounting folder. So, the policies in that GPO should get applied to PC1.
Let’s verify that with RsoP results.
After running RsoP I can see that the settings in the “Computer – Browser Settings” GPO are getting applied to PC1. In the results, you can also see what GPO the settings are coming from by looking under the GPO name. I can see the Prevent running First Run Wizard setting is coming from the Computer – Browser Settings GPO.
If you have multiple GPOs
If you had multiple GPOs that have overlapping settings, you can look at the results and see which GPO is taking precedence.
Simple, right?
By default, when you run rsop.msc on a client machine it will run in logging mode. If you want to run in planning mode, follow the steps below.
Simulate GPO policy settings with RsoP planning mode
I’m going to use planning mode to see what policies would get applied if I moved a user to the Sales OU. I have a GPO linked to this OU so I’m expecting those policies will get applied. But before I move a bunch of people to this OU I want to test and see what really would get set.
Step 1: Open MMC and add Resultant Set of Policy
Muscle growth taka.
MMC can be opened by typing MMC in the windows run command or typing mmc.exe from command line.
From the MMC console go to File and select Add/Remove Snap-in
Select Resultant Set of Policy from the available snap ins
Step 2: Run the RsoP wizard
Right click Resultant Set of Policy and select Generate Rsop Data
Click Next at the welcome screen
Select Planning mode Ark survival evolved ps3 download.
Select the User, Computer or OU that you want to simulate policy settings for.
I want to simulate policies for the Sales OU so I’m going to select Container for the user information and then PC1 for the computer.
Click Next
Select any additional simulation options if desired.
Click Next
Click Next
The User Does Not Have Rsop Data Windows 7
On the user security group page, you can simulate changes to the security groups.
Click Next
WMI Filters page, you can use all filters or only selected filters.
Click next
Summary page, click next
Finally, the wizard is complete.
The User Does Not Have Rsop Data Trusted Domain
So now I have the simulated results. I want to see what policies will get applied since I selected the sales OU.
Let’s check it out.
Powershell Error Rsop Data
The results are only going to show what settings are applied. It will not show the GPO itself just the policy settings.
Looking through the simulated results I can see that the screen saver settings are getting applied under the User Configuration. So, this confirms the GPO I set at the sales OU would get applied. I see no issues so I can move forward with moving users into this OU.
I hope you found this article helpful. If you have any questions leave a comment below.
See also:
GPResult Tool: How to check what Group Policy objects are Applied
Group Policy Best Practices
Recommended Tool: SolarWinds Server & Application Monitor
This utility was designed to Monitor Active Directory and other critical services like DNS & DHCP. It will quickly spot domain controller issues, prevent replication failures, track failed logon attempts and much more.
What I like best about SAM is it’s easy to use dashboard and alerting features. It also has the ability to monitor virtual machines and storage.
Problem: After executing gpresult /r command in order to displays Resultant Set of Policy (RSoP) summary data, Windows Group Policy (GPO) not applied and also fails to show user group memberships with error message “INFO: The user does not have RSOP data” show. This technical issue happens to both Windows 7 and Windows 10.
Content Summary
Solution 1: Add GroupPolicyMinTransferRate Registry Key to Disable Slow Link Detection
Solution 2: Remove User Profile’s GPO History via Registry Key
Solution 3: Uncheck “Set this printer as the default printer…” option in User Configuration GPO
Reference
Solution 1: Add GroupPolicyMinTransferRate Registry Key to Disable Slow Link Detection
Step 1: Login PC with Administrator right then open Registry Editor.
Step 2: Add 2 GroupPolicyMinTransferRate registry key as stated below:
[HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsSystem]
'GroupPolicyMinTransferRate'=dword:00000000
[HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsSystem]
'GroupPolicyMinTransferRate'=dword:00000000
Step 3: Restart the computer.
Step 4: Alternatively, these registry settings are otherwise set by the following Group Policy settings:
Policy location: Computer ConfigurationAdministrative TemplatesSystemGroup Policy
Policy location: User ConfigurationAdministrative TemplatesSystemGroup Policy
Policy name: Group Policy slow link detection
Policy setting: Enabled with a value of 0
Solution 2: Remove User Profile’s GPO History via Registry Key
Step 1: Open Registry Editor.
Step 2: Navigate to below registry path:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionGroup PolicyHistory
Step 3: Remove all GPO history from the user’s profile inside. Backup the register keys before you delete them.
Step 4: Open command prompt (cmd) to execute gpupdate /force and gpresult /h command again.
Solution 3: Uncheck “Set this printer as the default printer…” option in User Configuration GPO
Step 1: Open Group Policy Editor.
Step 2: Navigate to User Configuration > Preferences > Control Panel Settings > Printers.
Step 3: Right-click Printer and click Properties.
Step 4: In General tab > Shared Printer section, make sure the option Set this printer as the default printer is unchecked.
Step 5: Click ok to apply the change.
Step 6: Execute gpupdate /force and gpresult /h command again in client PC.
Reference
Microsoft Support: How to troubleshoot Group Policy object processing failures that occur across multiple forests
Microsoft Technet: Windows Server > Directory Services: INFO: The user “Domainuser” does not have RSOP data
Microsoft Technet: Windows Server > Group Policy: GPOs are not applied – “The user does not have RSOP data”
spiceworks Community: Windows > Active Directory & GPO: Group policy to set default printer runs but does not set default
Microsoft Technet Support: Windows Server > Group Policy: Windows 10 – gpresult /r does not list user group memberships