GPResult is a built-in Windows tool that helps administrators and IT support staff understand which Group Policies have been applied to a computer and user account.
Introduction
In business environments, administrators often use Group Policy to manage Windows computers and user accounts.
Group Policies can control:
- Password requirements
- Desktop settings
- Software installation
- Network configuration
- Security settings
- Windows updates
When a policy does not appear to be working correctly, GPResult can help identify why.
What Is GPResult?
GPResult is a command-line tool included with Windows.
It allows you to view:
✅ Applied Group Policies
✅ User policies
✅ Computer policies
✅ Security group membership
✅ Policy processing information
✅ Policy application errors
Think of GPResult as a diagnostic tool that answers the question:
“What Group Policies is this computer actually receiving?”
Common Use Cases
A Group Policy Isn’t Applying
An administrator creates a policy to map a network drive.
The user logs in but the drive doesn’t appear.
Running GPResult helps determine:
- Whether the policy was applied
- Whether the user is in the correct security group
- Whether a filtering issue exists
Troubleshooting Password Policies
A company updates its password requirements.
A user reports that the new policy isn’t being enforced.
GPResult can show which password policy is currently being applied.
Investigating Security Settings
Many security settings are controlled through Group Policy.
Examples include:
- Firewall configuration
- BitLocker settings
- Windows Defender policies
GPResult helps confirm whether those settings have been received by the computer.
Running GPResult
Open command prompt (as administrator) and run gpresult /r
This displays a summary of:
- User settings
- Computer settings
- Applied Group Policy Objects (GPOs)
Generate an HTML Report
For a more detailed report: gpresult /h c:\gpresult.html
This creates a report that can be opened in a web browser.
The HTML report is often easier to read than the command-line output.
Benefits of GPResult
✅ Built into Windows
✅ No additional software required
✅ Helps identify policy application problems
✅ Provides detailed troubleshooting information
✅ Useful for both users and computers
✅ Supports HTML reporting
Things GPResult Cannot Do
GPResult can show what policies have been applied, but it cannot:
❌ Fix policy issues automatically
❌ Modify Group Policies
❌ Create Group Policies
It is primarily a diagnostic and reporting tool.
Key Takeaway
GPResult is one of the most useful troubleshooting tools available to Windows administrators. When a Group Policy is not behaving as expected, GPResult provides a clear view of which policies have been applied to a computer and user account, making it easier to identify configuration, filtering, or security group issues.