The Disallow Interactive Users from generating Resultant Set of Policy data machine setting should be configured correctly.
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultant Set of Policy (RSoP) data. If this setting is enabled, interactive users cannot generate RSoP data. If this se ...