How to troubleshoot Permission issues with GpResult.exe

book

Article ID: 100004877

calendar_today

Updated On:

Resolution

GPRESULT is a command line tool accessible directly from the Windows command prompt by typing GPRESULT.

Entering the GPRESULT command with no switches or parameters, Group Policy information for the current user on the current computer will be presented.

However, some switches can be used to obtain group policy information for a different user or computer.

The syntax for the GPRESULT command is as follows:

 

gpresult [/s Computer [/u Domain\User /p Password]] [/user TargetUserName] [/scope {user|computer}] [/v] [/z]

 

Parameters:

/s Computer : Specifies the name or IP address of a remote computer. (Do not use backslashes.) The default is the local computer.

/u Domain\User : Runs the command with the account permissions of the user that is specified by User or Domain\User. The default is the permissions of the current logged-on user on the computer that issues the command.

/p Password : Specifies the password of the user account that is specified in the /u parameter.

/user TargetUserName : Specifies the user name of the user whose RSOP data is to be displayed.

/scope {user|computer} : Displays either user or computer results. Valid values for the /scope parameter are user or computer. If you omit the /scope parameter, gpresult displays both user and computer settings.

/v : Specifies that the output display verbose policy information.

/z : Specifies that the output display all available information about Group Policy. Because this parameter produces more information than the /v parameter, redirect output to a text file when you use this parameter (for example, gpresult /z >policy.txt).

/?: Displays help at the command prompt.

 


Issue/Introduction

Troubleshooting permission issue can be difficult, especially when privileges need to be compared with  working user's ones. However, a tool called gpresult.exe can be used to compare the RSoP (Resultant Set of Policy).