What GPO KB ID 0001898
Problem
There are a number of reasons for you to test and demonstrate group policy application. Recently on Experts Exchange there was a question. where a user could not add a printer because those settings were “Controlled by their organisation’ but was pretty sure no printer GPOs were applied.
Or you may simply be setting up a new GPO and it’s not applying, or not working as you would expect.
Solution : What GPO
I’ve been doing this a long time! Back in the day you could create a new MMC console (run mmc.exe) then add the “Resultant Set Of Policy” Snap in and rung that to evaluate and model different GPO applications and results. You can still do that but now you can simply run the RSOP command from an administrative command window.
In this case it will produce a list of applied group policies for the logged in user and the machine it was ran on (if you want results for differennt users or computers you can add the RSOP snap-in to mmc, or run the modelling from a machinesthat had the group policy management console installed)
But RSOP will give you output like this, you can see what policies are being applied, and what is the name of the group policy that applying that change.
But this will produce a complete list of all GPO settings and their status (even if they are not defined (see above)). An easier way to search is to use GPRESULT and send the output of that to an HTML file that you can open in a browser.
[box]
gpresult /h C:\{Path}\GPresult.htm
[/box]
This produces an easier to read report
You can get the same report and change the input parameters for users and computers etc, by running the Group Policy Results wizard that included with the AD DS RSAT tools
Related Articles, References, Credits, or External Links
Group Policy: Item-Level Targeting