Gpresult.exe does not display all the security settings of your default domain GPO in Windows Server 2003 (837129)


The information in this article applies to:

  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition

SYMPTOMS

On a computer that is running Microsoft Windows Server 2003, when you run the Group Policy Results command-line tool (Gpresult.exe) to view the security settings of your default domain Group Policy object (GPO), not all the security settings are displayed. For example, Gpresult.exe does not display the SMB signing settings or the NetLogon signing settings for either the client or the server.

CAUSE

This problem occurs because by default, Gpresult.exe only displays security settings that are stored as the following Resultant Set of Policy (RSOP) classes:
  • CLS_SECURITY_BOOLEAN
  • CLS_SECURITY_STRING
Gpresult.exe does not display the settings of the RSOP_RegistryValue class. The RSOP_RegistryValue class includes the Group Policy setting that defines the SMB signing settings and the NetLogon signing settings.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.Microsoft is researching this problem and will post more information in this article when the information becomes available.
Modification Type:MinorLast Reviewed:11/16/2004
Keywords:kbWinServ2003preSP1fix kbpending kbbug KB837129 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.