none
Is there any script or tool to check what group polices are applied in system

    Question

  • Is there any script or tool to check what group polices are applied in system if  we have admin rights. 


    Kris

    Friday, March 27, 2015 3:16 PM

Answers

  • yes

    gpresult

    rsop 

    • Proposed as answer by DonPick Saturday, March 28, 2015 9:25 AM
    • Marked as answer by Frank Shen5Moderator Tuesday, April 7, 2015 8:56 AM
    Friday, March 27, 2015 3:31 PM
  • powershell as well

    http://blogs.technet.com/b/heyscriptingguy/archive/2013/02/07/use-powershell-to-generate-and-parse-a-group-policy-object-report.aspx


    You wouldn't demand your Doctor a therapy just because you told him "I don't feel very well"
    You wouldn't expect your accountant to know how much your taxes are just because you told him "I have earned some money"
    Do not expect any IT Pro to suggest you a solution just because you said "It doesn't work"

    • Proposed as answer by DonPick Saturday, March 28, 2015 9:26 AM
    • Marked as answer by Frank Shen5Moderator Tuesday, April 7, 2015 8:56 AM
    Friday, March 27, 2015 3:35 PM
  • Hi Kris,

    >>Is there any script or tool to check what group polices are applied in system if  we have admin rights. 

    As others suggested, we can simply run cmd or PowerShell command to collect group policy result report to check what policy settings are being applied to a computer or a user. For example, a standard user account (without admin privileges) can run command gpresult/h report.html to collect user-part group policy settings applied to him or her. If we want to check computer-part group policy settings, we need to run the command with admin privileges.

    In addition, regarding generating group policy result, the following article can be referred to for more information.

    Gpresult

    https://technet.microsoft.com/en-in/library/cc733160.aspx?f=255&MSPPError=-2147217396

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, March 30, 2015 7:19 AM
    Moderator

All replies

  • yes

    gpresult

    rsop 

    • Proposed as answer by DonPick Saturday, March 28, 2015 9:25 AM
    • Marked as answer by Frank Shen5Moderator Tuesday, April 7, 2015 8:56 AM
    Friday, March 27, 2015 3:31 PM
  • powershell as well

    http://blogs.technet.com/b/heyscriptingguy/archive/2013/02/07/use-powershell-to-generate-and-parse-a-group-policy-object-report.aspx


    You wouldn't demand your Doctor a therapy just because you told him "I don't feel very well"
    You wouldn't expect your accountant to know how much your taxes are just because you told him "I have earned some money"
    Do not expect any IT Pro to suggest you a solution just because you said "It doesn't work"

    • Proposed as answer by DonPick Saturday, March 28, 2015 9:26 AM
    • Marked as answer by Frank Shen5Moderator Tuesday, April 7, 2015 8:56 AM
    Friday, March 27, 2015 3:35 PM
  • Actually, you need to enable auditing on group policy objects that will let you know, what changes made, when and where.

    Here is an informative msdn resource that will let you take the steps to enable auditing on Group Policy changes : http://blogs.msdn.com/b/canberrapfe/archive/2012/05/02/auditing-group-policy-changes.aspx

    Moreover, if you wish to get such critical changes reports automatically, you may also consider on Lepide Auditor suite(http://www.lepide.com/lepideauditor/group-policy.html) that helps to track every critical changes into real time and provides the changes reports at granular level.


    Lepide - Simplifying IT Management


    That not actually the original question though is it???
    Saturday, March 28, 2015 9:53 AM
  • Hi Kris,

    >>Is there any script or tool to check what group polices are applied in system if  we have admin rights. 

    As others suggested, we can simply run cmd or PowerShell command to collect group policy result report to check what policy settings are being applied to a computer or a user. For example, a standard user account (without admin privileges) can run command gpresult/h report.html to collect user-part group policy settings applied to him or her. If we want to check computer-part group policy settings, we need to run the command with admin privileges.

    In addition, regarding generating group policy result, the following article can be referred to for more information.

    Gpresult

    https://technet.microsoft.com/en-in/library/cc733160.aspx?f=255&MSPPError=-2147217396

    Best regards,
    Frank Shen


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, March 30, 2015 7:19 AM
    Moderator