{"id":1496,"date":"2018-02-25T14:52:30","date_gmt":"2018-02-25T14:52:30","guid":{"rendered":"http:\/\/activedirectorypro.com\/?p=1496"},"modified":"2023-09-10T15:06:16","modified_gmt":"2023-09-10T15:06:16","slug":"gpresult-tool","status":"publish","type":"post","link":"https:\/\/activedirectorypro.com\/gpresult-tool\/","title":{"rendered":"GPResult Tool: How To Check What Group Policy Objects are Applied"},"content":{"rendered":"\n<p>In this guide, you will learn how to use the GPResult command line tool to verify what group policy objects are applied to a user or computer.<\/p>\n\n\n\n<p>GPResult is a command line tool that shows the <a href=\"https:\/\/activedirectorypro.com\/how-to-use-rsop-to-check-and-troubleshoot-group-policy-settings\/\">resultant set of policy<\/a> for group policy objects. In other words, it creates a report that displays what group policy objects are applied to a user and computer.<\/p>\n\n\n\n<p>If you are using group policy in your environment then you definitely should know how to use this tool.<\/p>\n\n\n\n<p>Topics in this guide:<\/p>\n\n\n\n<ul>\n<li><a href=\"#examples\">GPResult Examples<\/a><\/li>\n\n\n\n<li><a href=\"#gpo-reports\">Group Policy Reports<\/a><\/li>\n<\/ul>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">GPResult Video Tutorial<\/h2>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"GPReult Tool - How to Check What Group Policy Objects are Applied\" width=\"1200\" height=\"675\" src=\"https:\/\/www.youtube.com\/embed\/w9w8bqCRS18?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p>If you don\u2019t like video tutorials or want more details, then continue reading the instructions below.<\/p>\n\n\n\n<p><span style=\"font-weight: 400;\">Group Policy is an effective way for administrators to control policy settings, deploy software, apply permissions, and so on across the entire domain.&nbsp;<\/span><\/p>\n\n\n\n<p><span style=\"font-weight: 400;\">When you have multiple Group Policy Objects you need a way to verify those objects are getting applied to a user or computer.&nbsp; <\/span><\/p>\n\n\n\n<p><span style=\"font-weight: 400;\">This is exactly what GPresult was built to do.&nbsp;<\/span><\/p>\n\n\n\n<p>Let&#8217;s look at the example below, I have 4 group policy objects applied at different levels of the domain. One at the root, two at ADPro Computers, and one at the ADPRo users OU.<\/p>\n\n\n\n<p>How do I know if they are working?<\/p>\n\n\n\n<p>How can I check if these GPOs are getting applied correctly?<\/p>\n\n\n\n<p>In the next section, I&#8217;ll show you exactly how I can use gpresult to verify these GPOs are getting applied.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"352\" height=\"366\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-0.jpg\" alt=\"\" class=\"wp-image-1501\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-0.jpg 352w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-0-289x300.jpg 289w\" sizes=\"(max-width: 352px) 100vw, 352px\" \/><\/figure>\n\n\n\n<p><strong>The GPResult command<\/strong> is included with Windows Server versions 2008 and higher. It is also included in client version Windows 7 and higher.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"examples\">GPResult Examples<\/h2>\n\n\n\n<p><strong>Tip:<\/strong> Run the command prompt as administrator or you may run into issues with the command returning computer settings.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Display All Applied GPOs applied to&nbsp; (User and Computer)<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/r<\/pre>\n\n\n\n<p>This is the most common usage of the gpresult command, it is a quick way to display all group policy objects to a user and computer.<\/p>\n\n\n\n<p>It will display the GPO order, displays details such as last time group policy was applied, which domain controller it run from, and which security groups the user and computer is a member of.<\/p>\n\n\n\n<p>From the screenshot of my group policy management console, there should be 3 GPOs that get applied to the computer and one to the user. Let&#8217;s look at the results of the command to verify that is happening.<\/p>\n\n\n\n<p>I can see under applied group policy objects that all three GPOs are getting applied.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"578\" height=\"561\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-1.jpg\" alt=\"\" class=\"wp-image-1503\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-1.jpg 578w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-1-300x291.jpg 300w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><\/figure>\n\n\n\n<p>Now let&#8217;s check the user GPOs. Yes, I can see the Users &#8211; Browser Settings GPO is getting applied.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"633\" height=\"296\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-2.jpg\" alt=\"\" class=\"wp-image-1504\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-2.jpg 633w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-2-600x281.jpg 600w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-2-300x140.jpg 300w\" sizes=\"(max-width: 633px) 100vw, 633px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Display GPOs applied to a specific user<\/h3>\n\n\n\n<p>If you don&#8217;t want to see both User and Computer GPOs then you can use the scope option to specify user or computer<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/r \/scope:user<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Display GPOs applied to a specific computer<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/r \/scope:computer<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Display GPOs applied on a remote computer<\/h3>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/s pc2 \/r<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">Generate HTML Report<\/h3>\n\n\n\n<p>This generates an html report of the applied group policy objects.&nbsp; If you don&#8217;t specify a path it will save it to the system32 folder.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/h c:\\reports.html<\/pre>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3.jpg\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"415\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3-1024x415.jpg\" alt=\"\" class=\"wp-image-1506\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3-1024x415.jpg 1024w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3-600x243.jpg 600w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3-300x122.jpg 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3-768x312.jpg 768w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/gpresult-3.jpg 1250w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Export to a text file<\/h3>\n\n\n\n<p>You can redirect the output to a text file with the command below. This is helpful if the results are producing lots of information.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">gpresult \/r &gt;c:\\results.txt<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"gpo-reports\">Group Policy Reports<\/h2>\n\n\n\n<p>If you want to create a report on GPO objects in your network I recommend the AD Pro Toolkit. It includes over 200 built-in reports on users, groups, group policy, and security. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"804\" height=\"404\" src=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/group-policy-reports-1.webp\" alt=\"\" class=\"wp-image-35624\" srcset=\"https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/group-policy-reports-1.webp 804w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/group-policy-reports-1-300x151.webp 300w, https:\/\/activedirectorypro.com\/wp-content\/uploads\/2018\/02\/group-policy-reports-1-768x386.webp 768w\" sizes=\"(max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>This easy to use tool will quickly generate a report on all GPOs, disabled GPOs, recently modified, and created, GPOs that are not linked, and much more. Below is a complete list of GPO reports. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\">General Group Policy Reports<\/h3>\n\n\n\n<ul>\n<li>All GPOs<\/li>\n\n\n\n<li>All settings disabled <\/li>\n\n\n\n<li>All settings enabled<\/li>\n\n\n\n<li>Computer configuration disabled<\/li>\n\n\n\n<li>User configuration disabled<\/li>\n\n\n\n<li>Deleted GPOs<\/li>\n\n\n\n<li>GPOs created in last 7 days<\/li>\n\n\n\n<li>GPOs created in last 30 days<\/li>\n\n\n\n<li>GPOs created in last 60 days<\/li>\n\n\n\n<li>GPOs modified in last 1 days<\/li>\n\n\n\n<li>GPOs modified in last 7 days<\/li>\n\n\n\n<li>GPOs modified in last 30 days<\/li>\n\n\n\n<li>Link not enabled<\/li>\n\n\n\n<li>Block inheritance enabled<\/li>\n\n\n\n<li>OU linked GPOs<\/li>\n\n\n\n<li>Site linked GPOs<\/li>\n\n\n\n<li>Domain linked GPOs<\/li>\n<\/ul>\n\n\n\n<p>You can download a free trial and test the reports on your own network. <\/p>\n\n\n<div class=\"gb-button-wrapper gb-button-wrapper-a3876b5d\">\n\n<a class=\"gb-button gb-button-6a0f82e8 gb-button-text\" href=\"https:\/\/activedirectorypro.com\/download-thank-you\/\">Download Free Trial<\/a>\n\n<\/div>\n\n\n<p>Group policy can be a pain, even when <a href=\"https:\/\/activedirectorypro.com\/group-policy-best-practices\/\">best practices<\/a> are followed group policy can still be challenging.\u00a0 Knowing how to use these built in tools will help you to verify and troubleshoot group policy&#8217;s in your environment. Go give it a try and let me know if you have any questions. <\/p>\n\n\n\n<p><strong>Related:<\/strong> <a href=\"https:\/\/activedirectorypro.com\/gpupdate-command\/\" data-type=\"post\" data-id=\"20578\">GPUpdate command: How to force a group policy update<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this guide, you will learn how to use the GPResult command line tool to verify what group policy objects are applied to a user or computer. GPResult is a command line tool that shows the resultant set of policy for group policy objects. In other words, it creates a report that displays what group &#8230; <a title=\"GPResult Tool: How To Check What Group Policy Objects are Applied\" class=\"read-more\" href=\"https:\/\/activedirectorypro.com\/gpresult-tool\/\" aria-label=\"More on GPResult Tool: How To Check What Group Policy Objects are Applied\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":1509,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1833],"tags":[],"_links":{"self":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/1496"}],"collection":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/comments?post=1496"}],"version-history":[{"count":3,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/1496\/revisions"}],"predecessor-version":[{"id":35628,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/posts\/1496\/revisions\/35628"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/media\/1509"}],"wp:attachment":[{"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/media?parent=1496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/categories?post=1496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/activedirectorypro.com\/wp-json\/wp\/v2\/tags?post=1496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}