The Resultant Set of Policy (RSoP) Wizard is a built-in MMC snap in. It helps you view policy settings applied to selected computers and users (in the logging mode) or simulate a policy implementation to plan changes to your network (in the planning mode). On Windows 10 machines .Net 4.0 needs to be enabled or the PM Console installed in order to view the values from the RSoP Wizard.
To use the Resultant Set of Policy Wizard to report on policies you have applied
-
Install the Client on the computer for which you are viewing or simulating a policy.
-
Open the MMC. On the Start menu, click Run, type MMC, and then click OK.
-
From the File menu, select Add/Remove Snap-in. The Add or Remove Snap-ins dialog appears.
-
Select Resultant Set of Policy under the list of snap-ins.
-
Click Add.
-
Click OK.
-
The Console Root window now has a snap-in, Resultant Set of Policy, rooted at the Console Root folder.
-
Under the Name column, click Resultant Set of Policy.
-
Complete one of the following steps:
-
Right-click Resultant Set of Policy and select Generate RSoP Data.
-
Under the Resultant Set of Policy pane in the Actions column, click More Actions and select Generate RSoP Data.
The Resultant Set of Policy Wizard appears.
-
Complete the following steps:
-
Choose the Logging mode to review policy settings or the Planning mode to simulate a policy implementation.
-
Specify the data requested in each tab and click Next.
-
Click Finish to quit the wizard.
The Console Root window now has Privilege Manager for Windows nodes, rooted at the Console Root folder under Computer Configuration and User Configuration. Privilege Manager for Windows Details appears on the right, showing the rules and advanced policy settings that are applied.
Client-side UI customization
Detailed information about this topic
Safeguard Privilege Manager for Windows supports the text customization of all user-facing dialogs on client computers. In addition to the ability to change the default English dialog text, admins can also create client-side UI customization files for any non-English client language locale.
To customize the language used in the client-side UI, one or more translation files must be located in the same folder where the client files are installed, by default: C:\Program Files (x86)\Common Files\One Identity\Safeguard Privilege Manager for Windows\Client.
A language-specific translation file must be named as follows: <two_letter_language_code>-pmlang.ini
Example:
-
Spanish translation language file name: es-pmlang.ini
-
English translation language file name: en-pmlang.ini (used to customize client computers with English locale)
-
French translation language file name: fr-pmlang.ini
Safeguard Privilege Manager for Windows automatically searches for the language translation file corresponding to the language local setting on a client computer. If no translation file is found, default English client-side text strings are used.
A specific language translation file can be used regardless of the Window's local settings with the use of a registry setting.
-
Hive: HKCU\Software\Scriptlogic Corporation\Privilege Authority
-
Key: Preferred Language
-
Type: REG_SZ
-
Value: name of language file, for example, es-pmlang.ini
The corresponding translation file must exist as described above.
In addition to checking locally on the client computer for language translation files, the Safeguard Privilege Manager for Windows Client automatically copies (and overwrites older, already existing) language files found on the NETLOGON share.
NOTE: NETLOGON is checked for updated language files every time a user logs on to a computer.
Additionally, Administrators can configure the Safeguard Privilege Manager for Windows Client to check an alternate location for updated language translation files. This can be done by updating the TranslationFilesFolder value in HKLM\Software\Scriptlogic Corporation\Privilege Authority.
You can use Microsoft tools with Safeguard Privilege Manager for Windows to:
