Skip to main content

Displaying detailed information about restricted group GPOs

You can display detailed information about restricted groups that are defined as Group Policy Objects (GPOs) in Active Directory and that are applied to the CIFS server.

About this task

By default, the following information is displayed:

  • Group policy name

  • Group policy version

  • Link

    Specifies the level in which the group policy is configured. Possible output values include the following:

    • Local when the group policy is configured in ONTAP
    • Site when the group policy is configured at the site level in the domain controller
    • Domain when the group policy is configured at the domain level in the domain controller
    • Organizational Unit when the group policy is configured at the Organizational Unit (OU) level in the domain controller
    • RSOP for the resultant set of policies derived from all the group policies defined at various levels

  • Restricted group name

  • The users and groups who belong to and who do not belong to the restricted group

  • The list of groups to which the restricted group is added

    A group can be a member of groups other than the groups listed here.

Display information about all restricted group GPOs by performing one of the following actions:
If you want to display information about all restricted group GPOs...Enter the command...
Defined in Active Directoryvserver cifs group-policy restricted-group show-defined -vserver vserver_name
Applied to a CIFS servervserver cifs group-policy restricted-group show-applied -vserver vserver_name

Example​

The following example displays information about restricted group GPOs defined in the Active Directory domain to which the CIFS-enabled SVM named vs1 belongs:

cluster1::> vserver cifs group-policy restricted-group show-defined -vserver vs1

Vserver: vs1
-------------

 Group Policy Name: gpo1
               Version: 16
                  Link: OrganizationalUnit
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

     Group Policy Name: Resultant Set of Policy 
               Version: 0 
                  Link: RSOP
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

The following example displays information about restricted groups GPOs applied to the CIFS-enabled SVM vs1:

cluster1::> vserver cifs group-policy restricted-group show-applied -vserver vs1

Vserver: vs1
-------------

 Group Policy Name: gpo1
               Version: 16
                  Link: OrganizationalUnit
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9

     Group Policy Name: Resultant Set of Policy 
               Version: 0 
                  Link: RSOP
            Group Name: group1
               Members: user1
              MemberOf: EXAMPLE\group9