Determine Resultant Set of Policy with GPResult.exe

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To determine resultant set of policy with GPResult

Gpresult is a command line tool and must be run from the command prompt. The gpresult command displays Resultant Set of Policy (RSOP) for a user or a computer. You can use gpresult to see what policy is in effect and to troubleshoot problems on Windows XP and higher computers.

Important

The gpresult.exe that ships with Windows XP and Windows Server 2003 family is completely different than the original version of gpresult.exe that shipped in the Windows 2000 Resource Kit. The newer version cannot be used to view policy information for computers running Windows 2000.

Syntax

Gpresult [/s computer [/u domain\user /p password]] [/user TargetUserName] [/scope {user|computer}] [/v] [/z]

Parameters

  • /s computer
    Specifies the name or IP address of a remote computer. (Do not use backslashes.) The default is the local computer.
  • /u domain\user
    Runs the command with the account permissions of the user that is specified by user or domain\user. The default is the permissions of the current logged-on user on the computer that issues the command.
  • /p password
    Specifies the password of the user account that is specified in the /u parameter.
  • /user TargetUserName
    Specifies the user name of the user whose RSOP data is to be displayed.
  • /scope {user|computer}
    Displays either user or computer results. Valid values for the /scope parameter are user or computer. If you omit the /scope parameter, gpresult displays both user and computer settings.
  • /v
    Specifies that the output display verbose policy information.
  • /z
    Specifies that the output display all available information about Group Policy. Because this parameter produces more information than the /v parameter, redirect output to a text file when you use this parameter (for example, gpresult /z >policy.txt).
  • /?
    Displays help at the command prompt.

Remarks

  • Because you can apply overlapping levels of policies to any computer or user, the Group Policy feature generates a resulting set of policies when the user logs on to the network. Gpresult displays the resulting set of policies that were enforced on the computer when the specified user logged on.

Examples

The following examples show how you can use the gpresult command:

gpresult /user targetusername /scope computer

gpresult /s srvmain /u maindom\hiropln /p p@ssW23 /user targetusername /scope USER

gpresult /s srvmain /u maindom\hiropln /p p@ssW23 /user targetusername /z >policy.txt

gpresult /s srvmain /u maindom\hiropln /p p@ssW23

Formatting legend

Format Meaning

Italic

Information that the user must supply

Bold

Elements that the user must type exactly as shown

Ellipsis (...)

Parameter that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.