StevenWhiting.com

Where the scripts etc are stored so you can edit them as if you go to the normal location as domain admin which is

\\DOMAIN NAME\NETLOGON\Scripts

You won’t have permissions but you will have access to the below area.

C:\Windows\SYSVOL\sysvol\DOMAIN NAME

You might not be able to write directly to it but you can create your scripts else where then copy them into there.

Orca MSI Editor. You can either take the long winded way of getting the file or download from here.

http://ge.tt/8ypwT1s2

When I uploaded it the link was valid and secure, lets hope it stays that way.

Very useful for editing MSI files for Group Policy.

gpedit.msc /gpcomputer: Computername

The account you’re logged into needs to have admin rights over that machine. If it don’t, then use your domainadmin account. So you’ll want to run a cmd as your domain admin. To make it easier create a batch file with

runas /user:domainname\admin C:\WINDOWS\system32\cmd.exe

Then in that cmd window type

gpedit.msc /gpcomputer: Computername

For example

gpedit.msc /gpcomputer: a4474

While I’m on DOMAIN1 still, to do it to a machine on DOMAIN2, try using the DOMAIN2\domain2admin account as my domain admin from DOMAIN1 doesn’t work.

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

On XP type rsop.msc to find more Group Policy results. Appears to give more info than gpresult.

http://www.404techsupport.com/2010/05/11/rsop-and-gpresult-must-know-tools-when-using-group-policy/