I’ve been mucking around with the RSOP wmi classes and am trying to get something simple out of something very detailed. In the Windows OS you can run gpresult at a command prompt and get some simple info. What I need is: Last Applied Time for both Computer and User policy. Anyone ever try this?
The WMI route is wickedly complicated, so I’m trying the Event Log route.
q: (source of it, time generated of it) of records whose (source of it contains “SceCli” and now - time generated of it < 1*day) of application event log
A: SceCli, ( Mon, 07 Dec 2009 21:39:26 -0500 )
A: SceCli, ( Tue, 08 Dec 2009 09:28:41 -0500 )
A: SceCli, ( Tue, 08 Dec 2009 11:16:48 -0500 )
It doesn’t really get me what I’m looking for, in terms of both the Computer and User policy “Last time Group Policy was applied:” time/date, but it does work.