GPResult for Troubleshooting Group Policy issues

Question / Problem:

How can I troubleshoot issues related to group policies?

Answer / Solution:

To troubleshoot group policy settings, you need to find out what policies are being applied to the computer and the user. One element of this is to run the command gpresult. This will show the groups that both the computer and user are in.

To run GPResult so that it outputs the results to a text file:

1. Navigate to the root of C:

2. Create a folder called temp if one does not already exist

3. Grant the current User account Read, Write, and Modify access to the \temp folder

4. Open the Command Prompt "as administrator"

5. Run the following command:
  gpresult > c:\temp\gpresult.txt

Another element of troubleshooting group policy is to use the Resultant Set of Policy snap-in. Run the command rsop.msc to open. This will show all of the policies that are in effect on the current user and computer.

Comparing these between users and computers that have problems against those that do not may point out more restrictive settings in areas such as security settings, account rights, connection settings, or any other area to which policies are being applied.

Applies to:

Keywords: Best Practices