A.
You can use Gpotool, which is included in the Windows 2003 Resource Kit tools (http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en ), to perform a check of the local user's home domain policies. To use the tool, open a command line and type
Gpotool
which, on my machine displays the following sample output:
Validating DCs...
Available DCs:
SAVDALDC01.savilltech.com
Searching for policies...
Found 2 policies
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Policy
Policy OK
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Friendly name: Default Domain Controllers Policy
Policy OK
You can use Gpotool with the /verbose switch to get more detailed information, and you can select a specific domain, domain controller (DC), and GPO by using the /domain, /dc, and /gpo switches, respectively. By default, the tool checks all GPOs on all DCs for consistency between the information stored in AD and the information in the template within SYSVOL. This is a great tool to use to check the general health of your Group Policy environment.