Gpresult.exe does not display all the security settings of your default domain GPO in Windows Server 2003

On a computer that is running Microsoft Windows Server 2003, when you run the Group Policy Results command-line tool (Gpresult.exe) to view the security settings of your default domain Group Policy object (GPO), not all the security settings are displayed. For example, Gpresult.exe does not display the SMB signing settings or the NetLogon signing settings for either the client or the server.

This problem occurs because by default, Gpresult.exe only displays security settings that are stored as the following Resultant Set of Policy (RSOP) classes:

• CLS_SECURITY_BOOLEAN
• CLS_SECURITY_STRING

Gpresult.exe does not display the settings of the RSOP_RegistryValue class. The RSOP_RegistryValue class includes the Group Policy setting that defines the SMB signing settings and the NetLogon signing settings.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.Microsoft is researching this problem and will post more information in this article when the information becomes available.