How to Use the Group Policy Result Command-Line Tool

If the Windows OS client is not part of a domain, you apply security settings through Local Group Policy Objects (LGPOs). LGPOs are a set of security configuration settings that are applied to users and computers. LGPOs are created and stored on the Windows OS computer. By default, LGPOs are stored in %systemroot%\System32\GroupPolicyUsers.

When a user logs on to a computer or domain, a resulting set of policies to be applied is generated based on the LGPOs, site GPOs, domain GPOs, and OU GPOs. The overlapping nature of group policies can make it difficult to determine what group policies will actually be applied to a computer or user.

To help determine what policies will actually be applied, Windows OS includes a tool called the Group Policy Result Tool, also known as the Resultant Set of Policy (RSoP). You can access this tool through the GPResult command-line utility. The gpresult command displays the resulting set of policies that were enforced on the computer and the specified user during the logon process.

The gpresult command displays the RSoP for the computer and the user who is currently logged in. You can use several options with this command.

How to Use the Group Policy Result Command-Line Tool FNfZRCN

Complete the following steps to run the gpresult command to output Resultant Set of Policy (RSoP) information into a text file:

1. Click Start Menu and type cmd.exe into the search box, right click the cmd.exe and select "Run as administrator" from the context menu.

2. At the Command Prompt, type Gpresult /H %UserProfile%\Desktop\GPReport.html command and press Enter key.

3. Open the GPReport.html file with the Internet Explorer web browser, the GPReport.html file will created at your Desktop.

How to Use the Group Policy Result Command-Line Tool 5Ez3Tgm

To display help document for gpresult.exe tool execute Gpresult  /? command.