The previous episodes about Group Policy early helped you in using RSoP GUI/MMC console, which has a visual view for you to inspect each setting that affected the destination machine.
Now I introduce to you a command-line tool gpresult that has so many advantages over its GUI brother.
gpresult can return the resultant set of policy for a given user/computer (what GPOs have been applied and their settings) quickly is the 1st pros.
You can use the gpresult CLI utility to view the application of policies.
It offers these benefits against RSoP GUI: granular/summarized details, view multiple objects by using more instances of command, redirect the results to view/manipulate in batch scripts/software, report generating for further review.
[00:30] To learn more about the syntax of gpresult commands, go to:
To learn more about RSoP, gpresult and its advanced features, go to:
[00:37] "Resultant Set of Policy (RSoP) is the cumulative result of the priority application of Group Policy. The RSoP can be seen by using the gpresult tool, the RSoP snap-in for the MMC or through the Help and Support Center" – searchwindowsserver.techtarget.com
[1:49] "When deploying GPOs, you need to consider:
– Group policy settings can overlap
– Moving a user or computer to another OU can affect what policies are getting applied
– GPO ordering and precedence
– User settings vs computer settings
So how exactly do you report what settings are getting applied?" – activedirectorypro.com
/r for summarized info, it is useful for viewing which policies are being applied and their order, the last time that a GPO was applied, etc.
[2:07] "GPResult is a command line tool that shows the Resultant Set of Policy (RsoP) information for a user and computer. In other words, it creates a report that displays what group policies objects are applied to a user and computer.
If your using group policy in your environment then you definitely should know how to use this tool" – activedirectorypro.com
/v with more details.
In this mode, you can view applied policies in current user/computer with advanced parameters like: Folder Id, Value, State.
[2:17] It is an HTML web page, so
you can store, review, print, distribute later.
/z specifies that the output displays all available information about Group Policy.
[2:23] "Group Policy is complex, and it's not always easy to know the best way to deploy and manage it. In this course, Best Practices for Group Policy Deployment and Management, you’ll learn the best ways to deploy Group Policy in order to manage a reliable, functional Group Policy infrastructure" – pluralsight.com
/h indicates that we are exporting to the HTML format that is accountable/printable.
[2:41] I found gpresult has so many applications; it is recommended that administrators who have IT skill should utilize this tool to manage the Active Directory environment and the Group Policy.
[2:12] "Group Policy Results (GPResult.exe) command line tool verifies all policy settings in effect for a specific user or computer. System Administrators can run GPResult on any remote computer within their scope of management. By default, GPResult returns settings in effect on the computer on which GPResult is run" – mashtips.com
[2:52] Check out examples about gpresult usage here!
This is the policy which has been deployed via the RSoP GUI previously.