Windows Server

Group Policy Object: How to analyze group policies applied to a user and computer account

Group Policy (GP) is a Windows management feature that allows you to control multiple users’ and computers’ configurations within an Active Directory environment. With GP, all Organizational Units, sites, or domains can be configured from a single and central place. If you ever wanted to know what group policies are enabled on your computer, here are a few ways of finding them out. You may want to see the following articles as well. Why use RSAT? How to Install RSAT on Windows 10Remote Server Administration Tools: To install RSAT on Windows Server, and what is Group Policy Object and how can it be launched in Windows.

Via the Resultant Set of Policy Management Console: This is the easiest way to determine the group policies applied to you. There it is a very powerful builtin command prompt used for auditing group policy settings. 
Alternatively, search for "run" and type rsop.msc into the run box and then hit enter or
- Win + R keyboard combination to bring up a run box, type rsop.msc into the run box and then hit enter.

View Post

When this is run, this will analyse and process the policies applied to you.

After its analysis, it will display the resultant set of Policy applied to you.

Now click on each folder, empty folders implies there are no policies applied to you. This is currently the only policies applied to my device via the computer configuration.

Via the Command line:  It should be noted that you have to specify the scope of the results. To find all the policies that are applied to your user account, you would use the following command:

gpresult /Scope User /v

This will process and display the results as shown below.

Then if you scroll down, you will see the the Resultant Set Of Policies for User section.

If you are looking for all policies applied to your Computer, all you need to do is change the scope:

gpresult /Scope Computer /v

More output

More output – Administrative template

Alternatively, there is a shortcut command that can be applied to het the desired result.

User Side Policies: To get all the policies applied to your user avcount, simplyrun the command below from the command prompt.

gpresult /r

This will give only the user-side of group policies applied.

Computer Side Policies: To get this policies, simple run command prompt with administrative privilege, this will output policies relating to the computer.

gpresult /r

Note: The command prompt has to be run with administrators rights

I hope you found this blog post helpful. If you have any questions, please let me know in the comment session.

Subscribe
Notify of
guest
2 Comments
Inline Feedbacks
View all comments
Ben Lee
Ben Lee
26 days ago

Great info. One thing I don’t understand that the new server GPO has been applied to the local PC and can be seen from running “rsop.msc” but not from local GOP “gpedit”? just wonder why? Thanks

Last edited 26 days ago by Ben Lee
2
0
Would love your thoughts, please comment.x
()
x