Policy

Determine if interactive users can generate Resultant Set of Policy data

This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If you enable this policy setting, interactive users cannot generate RSoP data. If you disable or do not configure this policy setting, interactive users can generate RSoP. Note: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data. Note: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc Note: This policy setting exists as both a User Configuration and Computer Configuration setting. Also, see the "Turn off Resultant set of Policy logging" policy setting in Computer Configuration\Administrative Templates\System\GroupPolicy.

Policy
Pack Microsoft Windows
Category System / Group Policy
Policy ID 0bcd395114b0
Internal name DenyRsopToInteractiveUser_2

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\System\DenyRsopToInteractiveUser (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\System\DenyRsopToInteractiveUser (disabled) = 0

Policy notes

This policy setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If you enable this policy setting, interactive users cannot generate RSoP data. If you disable or do not configure this policy setting, interactive users can generate RSoP. Note: This policy setting does not affect administrators. If you enable or disable this policy setting, by default administrators can view RSoP data. Note: To view RSoP data on a client computer, use the RSoP snap-in for the Microsoft Management Console. You can launch the RSoP snap-in from the command line by typing RSOP.msc Note: This policy setting exists as both a User Configuration and Computer Configuration setting. Also, see the "Turn off Resultant set of Policy logging" policy setting in Computer Configuration\Administrative Templates\System\GroupPolicy.

Related policies

Allow cross-forest user policy and roaming user profilesAlways use local ADM files for Group Policy Object EditorChange Group Policy processing to run asynchronously when a slow network connection is detected.Configure Direct Access connections as a fast network connectionConfigure disk quota policy processingConfigure EFS recovery policy processingConfigure folder redirection policy processing