Recipe 9.19 Simulating the RSoP
9.19.1 Problem
You want to simulate the
RSoP based on OU, site, and security group membership. This is also
referred to as Group Policy Modeling.
9.19.2 Solution
|
This must be run against a Windows Server 2003 domain controller.
|
|
9.19.2.1 Using a graphical user interface
Open the GPMC snap-in. In the left pane, right-click Group Policy Modeling and select Group
Policy Modeling Wizard. Select a domain controller to process the query and click Next. Under User Information and/or Computer Information, select either the
container you want to simulate to contain the user or computer or
select a specific user or computer account, and click Next. Select a site if necessary, and click Next. If you selected a target user container or user account in step 4,
you will be presented with an option to simulate different group
membership. Click Next when you are done. If you selected a target computer container or computer account in
step 4, you will be presented with an option to simulate different
group membership. Click Next when you are done. If you selected a target user container or user account in step 4,
you will be presented with an option to simulate any additional WMI
filters. Click Next when you are done. If you selected a target computer container or computer account in
step 4, you will be presented with an option to simulate any
additional WMI filters. Click Next when you are done. Click Next to start the simulation. Click Finish. In the right pane of the GPMC window, the results of the simulation
will be displayed.
9.19.3 Discussion
With GPMC, you can simulate the RSoP based on user-defined OU, site,
group, and domain membership. This is very powerful because it allows
you to create one or more GPOs, simulate it being applied to a user
and computer and determine whether any changes are necessary before
deployment.
9.19.4 See Also
Recipe 9.20 for viewing the RSoP
|