Microsoft KB Archive/837129

= Gpresult.exe does not display all the security settings of your default domain GPO in Windows Server 2003 =

Article ID: 837129

Article Last Modified on 10/26/2006

-

APPLIES TO


 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition

-





SYMPTOMS
On a computer that is running Microsoft Windows Server 2003, when you run the Group Policy Results command-line tool (Gpresult.exe) to view the security settings of your default domain Group Policy object (GPO), not all the security settings are displayed. For example, Gpresult.exe does not display the SMB signing settings or the NetLogon signing settings for either the client or the server.



CAUSE
This problem occurs because by default, Gpresult.exe only displays security settings that are stored as the following Resultant Set of Policy (RSOP) classes:
 * CLS_SECURITY_BOOLEAN
 * CLS_SECURITY_STRING

Gpresult.exe does not display the settings of the RSOP_RegistryValue class. The RSOP_RegistryValue class includes the Group Policy setting that defines the SMB signing settings and the NetLogon signing settings.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.Microsoft is researching this problem and will post more information in this article when the information becomes available.

Keywords: kbwinserv2003presp1fix kbpending kbbug KB837129

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.