Table of Contents
Introduction
If you want to see which Group Policies are applied to a client, you can run the RSOP command (Resultant Set of Policies) to export an RSOP report.
You can also export the RSOP results can be accomplished via the GUI as well as via Powershell.
In this blog post, I explain how to export the results from RSOP to an HTML report using Powershell.
If you are interested in learning more about Powershell, I highly recommend watching a Pluralsight course on the topic.
What is the GPResult command?
GPResult, or Group Policy Result, is the result of all policies applied to the machine. GPresult displays the result of all policies applied on the device, both for the user and computer.
You should run GPResult if you want to understand what group policies are applied to the machine.
How to use GPResult to export results to a text file
Gpresult parameters
Here are the gpresult parameters that are available. You can always use gpresult /? . If you want to find the different switches. These can be run both locally and remotely.
| Parameter switch | Comment |
| /s <computer name> | Specify the IP address or computer name of a remote computer. |
| /u <user name> | If this is not specified, the credentials of the current user are used. This parameter enables the option to use another user name and password. |
| /p <password> | Specify the password of the user name entered above. |
| /user <domain>\<user name> | Specify the remote user name for which you want to receive RSOP data. |
| /scope <user/computer> | Specify if you want RSOP data from the computer or username. If this is not specified, the current user’s credentials are used. |
| /x or /h <filename> | Specify if you want to save the file as an XML or HTML file. |
| /f | Force the filename to be overwritten. |
| /r | Display summary data of RSOP. |
| /v | Display verbose information. |
| /z | Display all information from Group Policy with precedence higher than 1. |
Example of gpresult output
Use the below command to export the GPResult output to a text file on the local computer. Note that you should run this from an elevated command prompt or elevated Powershell prompt to retrieve all the details.
In my example, I use /v for verbose information for both the local user and machine.
gpresult /v >> c:\temp\gpresult.txt
What is the RSOP command line?
The RSOP or Resultant Set of Policies command gathers all Active Directory Group Policies for the user account and computer settings applied to a device.
This is similar to the gpresult command but shows the results in the same way you would when configuring a Group Policy.
The look and feel is similar to that of the Local Group Policy (gpedit.msc) and the Group Policy Manager MMC console in Active Directory.
How to export an RSOP report
How to run RSOP from the command-line
Open an elevated command prompt (CMD) or Powershell. Run the command to generate RSOP data:
rsop
RSOP will now gather which Group Policies have been applied for your client.
Note: As mentioned in the text, “Starting with Microsoft Windows Vista Service Pack 1 (SP1), the Resultant Set of Policies (RSOP) report does not show all Microsoft Group Policy settings. To see the full set of Microsoft Group Policy settings applied for a computer or user, use the command-line tool gpresult.
This means that it is OK to use RSOP, but if you want to be sure that all Groupm Policies are included, use gpresult instead.
Gather RSOP results using Powershell
If you prefer to use Powershell, open an elevated Powershell window, and use the Get-GPResultantSetOfPolicy cmdlet.
Run RSOP for a remote computer using the Group Policy Management MMC
If you want to get the RSOP results from a remote computer connected to an Active Directory domain, you can gather summary data via the Group Policy Management console.
This is possible for both the user and for the computer. In the report, you will see which security groups the user or device is a member of and which Group Policy Objects are applied to the resource.
Export RSOP command to HTML using Powershell for a Remote Computer
In this example, I retrieve the Resultant Set of Policies (RSOP) for user Daniel in the Contoso domain, who uses the computer Windows10-Client. The output is in HTML, and the filename is D:\rsop.html.
Run the following command to save the report to an HTML file. In this example, I set the scope user to Contoso\Daniel and on a remote computer.
Get-GPResultantSetOfPolicy -user Contoso\Daniel -Computer Windows10-Client -ReportType Html -Path "D:\rsop.html"
Conclusion
Using Powershell to export the results from RSOP is a much faster way than using the GUI. How do you export these results? Please leave a comment below!
If you are interested in learning more about Powershell, I highly recommend watching a Pluralsight course on the topic.
