HOW TO: Use the Group Policy Results Tool in Windows 2000 (321709)

SUMMARY

This step-by-step article describes how to use the Group Policy Results tool (Gpresult.exe) in Windows 2000.

back to the top

Overview of the Group Policy Results Tool

You can use the Group Policy Results tool to display information about how Group Policy affects both the currently logged-on user and the computer. This command-line tool is available in the Windows 2000 Resource Kit. To download this tool, visit the following Microsoft Web site: You can use Gpresult.exe to obtain the following information about both the currently logged-on user and the computer:

• Operating system information:
  • Type: Windows 2000 Server, Windows 2000 Professional, or domain controller
  • Version number and service pack information
  • Whether Terminal Services is installed, and if so, the mode that is using
• User information:
  • User name and location in Active Directory (if applicable)
  • Domain name and type (Windows 2000 or Microsoft Windows NT)
  • Site name
  • Whether the user has a local or roaming profile, and the location of the profile
  • Security group membership
  • Security privileges
• Computer information:
  • Computer name and location in Active Directory (if applicable)
  • Domain name and type (Windows 2000 or Windows NT)
  • Site name
• Group Policy information:
  • The last time that Group Policy was applied and the domain controller that applied the Group Policy setting for the user and the computer
  • A list of all applied Group Policy objects (GPOs), and their details, including a summary of the extensions that each GPO contains
  • Registry settings that are applied and the details
  • Folders that are redirected and their details
  • Disk quota information
  • Internet Protocol (IP) Security settings
  • Scripts

back to the top

Gpresult.exe Syntax

Gpresult.exe uses the following syntax: You can use the following parameters with Gpresult.exe:

• /v: Use this parameter to run Gpresult.exe in verbose mode. When you use this parameter, the following information is displayed (in additional to the information that is typically displayed):
  • A list of the user's security privileges
  • GPO details including globally unique identifier (GUID), friendly name, version, and source
  • Details for the following Group Policy extensions:
    • Administrative Templates (registry-based policy settings)
    • Application management
    • Disk quotas
    • Folder redirection
    • IP Security
    • Scripts
• /s: Use this parameter to run Gpresult.exe in super-verbose mode. When you use this parameter, the following information is displayed (in addition to the information that is typically displayed):
  • Binary values of binary registry settings (when applicable)
  • A detailed list of the programs that are displayed in the Add/Remove Programs tool in Control Panel
  • The Group Policy Container (GPC) and Group Policy Template (GPT) version numbers of the GPO
• /c: Use this parameter to display information about computer settings only.
• /u: Use this parameter to display information about user settings only .

back to the top

Examples

• To run Gpresult.exe in verbose mode, type the following line at the command prompt, and then press ENTER:

  gpresult /v

• To run Gpresult.exe in super-verbose mode and direct the output to a file named Gp.txt in the C:\Reports folder, type the following line at the command prompt, and then press ENTER:

  gpresult /s > c:\reports\gp.txt

• To display information about user settings only, type the following line at the command prompt, and then press ENTER:

  gpresult /u

• To display information about computer settings only, type the following line at the command prompt, and then press ENTER:

  gpresult /c

back to the top