Determine if interactive users can generate Resultant Set of Policy data

This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If you enable this policy setting interactive users cannot generate RSoP data. If you disable or do not configure this policy setting interactive users can generate RSoP. Note: This policy setting does not affect administrators. If you enable or disable this policy setting by default administrators can view RSoP data. Note: To view RSoP data on a client computer use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP. mscNote: This policy setting exists as both a User Configuration and Computer Configuration setting. Also see the “Turn off Resultant set of Policy logging” policy setting in Computer Configuration -> Administrative Templates -> System -> GroupPolicy.

Additional Information

  1. Registry path is:

    HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> Windows -> System # DenyRsopToInteractiveUser

  2. The Administrative Template path is:

    System -> Group Policy


* Making mistakes while changing registry values can affect your system adversely. We recommend you to create a System Restore point before making registry manipulation. If you're new to Registry Editor, read this beginner's guide.
** To locate the registry and administrative template path, checkout beginner's guide.
You're here :
Checkout Kapil Sparks™