How To Get A Complete Group Policy (GPO, RSoP) Report

Problem:

You require a report to see which GPO's are applied to specific users when logging into specific machines.

Resolution:

While the gpresult command, using the /h or /s switches, can grab a partial RSoP report, often when running it in a session as a user, it will not get the Computer Policy information due to permissions issues, or if you run that command as an administrator, it will not grab the user policy. The gpresult /v will usually grab a complete report, but in text format.

The Group Policy Management Console, accessible via most domain controllers or on other servers where the console is installed, has a convenient method of saving a complete RSoP report in HTML format.

1. Open the Group Policy Management Console (Start->Administrative Tools->Group Policy Management or by running gpmc.msc from Run or a command prompt).
   
   
2.  Right-click on Group Policy Results at the bottom of that screen, and choose 'Group Policy Results Wizard...'. When the introduction screen comes up, click Next.

3. Select 'Another computer' and type in the computer name, or click Browse and search for the computer you are looking for. (If you are unsure of the name of the computer you are logged into, open a command prompt and run the 'hostname' command.)

4. Under 'Select a specific user', select the user who is currently logged into the VM or workstation:

5. Click Next and Finish. The Group Policy Management Console will display all of the user and computer policies assigned to the machine.

6. Right-click on the newly-generated report and choose 'Save Report...'