On an Active Directory Domain with multiple GPOs in place, it’s nice having a way that can generate reports in various situations.
Group Policies applied to my account and computer
There is a built-in tool called
There is also a built-in command line called GPResult that you can also use to collect all the policies applied in place.
gpresult /scope user /v
This is to search and show all the active policies applied to the current user. To find all policies applied to the PC, run the following instead in an elevated Command Prompt window.
gpresult /scope computer /v
Group Policies applied to a remote computer and user
To get all the policies applied to a remote computer:
GPResult /s computer-name /scope computer /v
To get all the polices applied to a remote user on a remote computer
GPResult /s computer-name /user username /scope user /v
GPOs applied to my account and computer
Same command as above but with a different switch.
GPResult /scope user /r
GPResult /scope computer /r
GPResult /s computer-name /user username /scope user /r
GPResult /s computer-name /scope computer /r
Policies set in a specific GPO
That’s where PowerShell shines.
Get-GPOReport -Name "GPO-Name" -ReportType HTML -Path "Path\report.html"
It generates a report in HTML format for the specified GPO and
Policies set in all GPOs in the domain
Get-GPOReport -All -ReportType HTML -Path "path\all-gpo.html"
A full list of GPOs in the domain
Simply use Get-GPO cmdlet.