GPResult Tool

Windows-Server-Group-Policy
Advertisements by Google

In this guide, you will learn how to use the GPResult command line tool to verify what group policy objects are applied to a user or computer.

GPResult is a command line tool that shows the Resultant Set of Policy (RsoP) information for a user and computer. In other words, it creates a report that displays what group policies objects are applied to a user and computer.

If you are using group policy in your environment then you definitely should know how to use this tool.

The GPResult command is included with Windows Server versions 2008 and higher. It is also included in client version Windows 7 and higher.

GPResult Examples

Tip: Run the command prompt as administrator or you may run into issues with the command returning computer settings.

Display All Applied GPOs applied to  (User and Computer)

gpresult /r

This is the most common usage of the gpresult command, it is a quick way to display all group policy objects to a user and computer.

It will display the GPO order, displays details such as last time group policy was applied, which domain controller it run from, which security groups the user and computer is a member of.

Advertisements by Google

From the screenshot of my group policy management console, there should be 3 GPOs that get applied to the computer and one to the user. Let’s look at the results of the command to verify that is happening.

I can see under applied group policy objects that all three GPOs are getting applied.

Now let’s check the user GPOs. Yes, I can see the Users – Browser Settings GPO is getting applied.

Display GPOs applied to a specific user

If you don’t want to see both User and Computer GPOs then you can use the scope option to specify user or computer

gpresult /r /scope:user

Display GPOs applied to a specific computer

gpresult /r /scope:computer

Display GPOs applied on a remote computer

gpresult /s pc2 /r

Generate HTML Report

This generates an html report of the applied group policy objects.  If you don’t specify a path it will save it to the system32 folder.

gpresult /h c:\reports.html

Export to a text file

You can redirect the output to a text file with the command below. This is helpful if the results are producing lots of information.

gpresult /r >c:\results.txt

Group policy can be a pain, even when best practices are followed group policy can still be challenging.  Knowing how to use these built in tools will help you to verify and troubleshoot group policy’s in your environment. Go give it a try and let me know if you have any questions.

Advertisements by Google

Related Posts

Leave a comment

Privacy Preferences
When you visit our website, it may store information through your browser from specific services, usually in form of cookies. Here you can change your privacy preferences. Please note that blocking some types of cookies may impact your experience on our website and the services we offer.
%d bloggers like this: