You are using an unsupported browser. Please update your browser to the latest version on or before July 31, 2020.
close

04: How do I enable a STANDARD USER to see the COMPUTER SIDE RsOP ?

If asked by support for a GPRESULT /R GPRESULT /H or GPRESULT /X report, the default behavior of Active Directory is to only show the USER SIDE of the RSOP, and not the COMPUTER SIDE.

If you attempt to grab BOTH, or explicitly try to grab the COMPUTER side, you will NOT see the COMPUTER SIDE and/or get ACCESS DENIED like this.

There is an easy temporary (or, if you wish) a permanent workaround.
Locate where the COMPUTER is within an OU. (Specific OU or any TOP LEVEL OU which contains the computer is fine.)
In my example, the computer is in East Sales Desktops. Then in the GPMC click DELEGATION, choose READ GROUP POLICY RESULTS DATA, then click ADD.

Then add the USER or a GROUP the user is in. In this case I’m added EASTSALESUSER1 or you can add, for instance, AUTHENTICATED USERS.

The final results before testing should look like this (where the USER (or GROUP) can now see the COMPUTER side RSOP..)

The final result will be that THIS USER can now see the COMPUTER SIDE RSOP.

  • 877
  • 09-Mar-2021
  • 3091 Views