The GPA Resultant Set of Policy (RSoP) report for a user or computer does not include all Group Poli (NETIQKB52489)

fact
NetIQ Group Policy Administrator 5.0

symptom
The GPA Resultant Set of Policy (RSoP) report for a user or computer does not include all Group Policy Objects (GPOs).

symptom
After installing the Microsoft hotfix described in Microsoft Knowledge Base Article KB 833883, GPA RSoP reports no longer show GPOs that apply to Universal security groups.

symptom
GPA omits GPOs that are applied to groups from the RSoP report for the user or computer if a user or computer is a member of a Universal security group from a domain that is different than the domain where the user account or computer account resides.

cause

This is a known issue you may experience after installing the hotfix described in Microsoft Knowledge Base Article KB 833883. After installing the Microsoft hotfix described in Microsoft Knowledge Base Article KB 83388, GPA may omit GPOs that are applied to groups from the RSoP report for the user or computer if:

• The user or computer is a member of a Universal security group from a domain that is different than the domain where the user account or computer account resides.
• The user or computer belongs to a group that is a member of a Universal security group from a domain that is different than the domain where the user account or computer account resides.

For more information about Microsoft Knowledge Base Article KB 833883, see the Microsoft Technical Support Web site at http://support.microsoft.com.

fix

This issue is addressed in NetIQ Group Policy Administrator version 5.0 Hotfix 52489.

Hotfix 52489 addresses an issue that occurs if you have installed the Windows Server 2003 hotfix described in Microsoft Knowledge Base Article KB 833883. If you have installed the Microsoft hotfix, if a user or computer is a member of a Universal security group from a domain that is different than the domain where the user account or computer account resides, or the if the user or computer belongs to a group that is a member of a Universal security group from a domain that is different than the domain where the user account or computer account resides, GPA may omit GPOs that are applied to groups from the Resultant Set of Policy (RSoP) report for the user or computer. Hotfix 52489 ensures GPA includes all GPOs delegated to groups in the same domain as the user and computer when generating an RSoP report.

To install this hotfix, perform the following steps:

1. Close all GPA user interfaces.
2. Run the GPA50000_Hotfix52489.exe file on each computer where you installed the GPA Console.

This hotfix modifies the faRsopAnalyzeGpsGpos.xsl file. By default, this file is located in the Program Files\NetIQ\Group Policy Administrator\Bin\XML\Rsop folder.

For more information, please contact NetIQ Technical Support at https://www.netiq.com/support .

Formerly known as NETIQKB52489