Running a health check

You can run a health check on user policies, computer policies or software restrictions policies to ensure they are working optimally, and that all the appropriate links exist and are correct. The health check will check that all appropriate groups exist and have the correct permissions applied to them. You can also choose to identify and fix inconsistencies or errors.

Running a health check produces a log file that reports any problems it has found, and any fixes it has made.

When you run a health check on many items, it may take some time to complete. We recommend that you only run a health check when registry policies are not being applied correctly to users or computers.

To run a health check

From the left-hand pane, expand Registry Policies.
Choose either Computer Policies or User Policies to check all the policies. To run a health check on a specific policy, expand the folders in the left-hand pane until you can choose the name of the policy.
From the toolbar, choose Health Check.
Choose one of the following:

Log any problems found.
Fix problems found automatically.

Optionally, to check the associated groups, tick the 'Check for unexpected groups...' box.
Click OK to start the health check.
To view the progress of the health check, choose Health Check from the left-hand pane. A list of recent health checks is displayed in the right-hand pane.
Optionally, to view the log file generated by a health check, in the right-hand pane click the View Log button. When you have finished viewing the log, close the window.