Check your Group Policies settings (applies to your computer and user account)

mmc_gpo_activated

Sometimes, you need to check on a targeted computer or user account which Group Policies are applied at the logon. It exists several mean to do that.

Fist, thanks to the command line prompt.

You can use the following commands depending what settings you want to check.

To get, the Group Policies applied to your computer:

gpresult /Scope Computer /v

To get, the Group Policies applied to your user account:

gpresult /Scope User /v

In these examples, you can see that I have configured several examples of policies. I allowed the PING request on my lab on all computers and I desactivated the display of the Server Manager on the logon. You can scroll up and down to see details.

examples_applied_GPO_commandline

With the same command, you can also generate an HTML file to get the whole configuration of user account and computer. Use the following command :

gpresult /h Extract.html

According to the location of the prompt, an HTML file called Extract.html will be generated. You will be able to see all the GPO configures on your user account and your computer. Both applied GPOs and denied GPOs.

example_extract_file_GPO

You can display detailed configuration by playing with the “Show” and “Hide” links on the right part.

You can also use rsop.msc

You can also use the Resultant Set of Policy Management Console by simply running the following command in a prompt command or in Windows 8 Star Menu or in the “Run” windows (press WIN + R to display it) :

rsop.msc

The advantage of this method is the result is easier to read and understand thanks to the GUI. Obviously, we find back the same settings of applied GPO.

rsop