There is a built-in tool called “Resultant Set of Policy” (RSoP) that simulates the policy settings applied to computers and users using Group Policy. It acts as a query engine that polls existing policies based on site, domain, domain controller, and organizational unit, and then reports the results of those queries.
To launch Resultant Set of Policy, press Win + R to fire up the Run dialog box, type rsop.msc, and press Enter.
The tool fires up and scans the
active policies and displays them within the tool. You will still need to go
through the folders to find out each active policy applied to the account and
computer.
GPResult
Alternatively, there is also a
command line called GPResult that you can also use to collect active
Group Policy settings. Simply open a Command Prompt and run the following
command.
gpresult /scope
user /v
This is to search and show all the
active policies applied to the current user. To find all policies applied to
the PC, run the following instead in an elevated Command Prompt window.
gpresult /scope
computer /v
Even more, you can use GPResult to gather Group Policy information applied to certain user account from a remote computer, such as below:
gpresult /c computername /u username /p password /user targetusername /scope user /r
Or, all Group Policies applied to a remote computer:
gpresult /c computername /u username /p password /scope computer /r
Note that the switch /r is to display RSoP
summary data while /v is to display verbose policy
information.
No comments:
Post a Comment