Utility to print GPO policies?

[Shotgun]

Is there any utility that could print what are the enabled sections of a Group Policy Object under Windows 2000/XP/2003 Active Directory?

I have searched everywhere and could not find such a thing. It would be very convenient for anyone that has to modify existing Group Policies, since the way MS gives us is very time-consuming. Literally, I have to go branch by branch of the GPO just to see what's enabled, disabled or untouched. It would be easier to verify if I could get a printout of what's enabled and where.

Is there anything like that or at least a way to use scripting or something to get what I need?

[Spyder2k]

Command Prompt -> 'gpresult'

Platform: XP, 2K3

[SC00BS]

http://support.microsoft.com/default.aspx?...;en-us;323276#2

[Shotgun]

Command Prompt -> 'gpresult'

Platform: XP, 2K3

Already checked that. For me, it's somewhat useless since it only says (for ex.) 'The computer received "Security" settings from these GPOs: Local Group Policy' but does not indicate what policies (entries?) were received/enabled. You end up doing the same, going to the GP editor and opening each branch to see what settings are enabled/disabled.

@SC00BS: Very informative. I will try that tomorrow. Thanks!

[thomasd]

MS Group Policy Management Console should do the trick.

http://www.microsoft.com/downloads/details...&displaylang=en

[Spyder2k]

Command Prompt -> 'gpresult'

Platform: XP, 2K3

Already checked that...

Try it with the '/V' or '/Z' verbose switches.

[Shotgun]

Whoa! It did not occur to me to use the /? option. duh...

Actually, the /S option is what I was looking for. Thanks!