>

See which Group Policies apply with gpresult /r

Dump the applied GPO list, security groups, and policy origin for the user and computer — the first stop when a policy 'isn't working'.

WindowsadministrationsecuritygpoLow risk
Run `gpresult /r` to see applied GPOs for the user and computer, or `gpresult /h report.html` for a full browsable report.

01Command

Command
$ gpresult /r

02What it does

gpresult performs an RSoP (Resultant Set of Policy) query: it shows which GPOs were applied, which were filtered out, and the security groups your account belongs to — often revealing that a policy was filtered because your machine sits in the wrong OU. The /r summary is quick; `/h report.html` produces a detailed HTML document including registry-level settings. Computer-scope results need an elevated window, so run one if the list looks incomplete.

03Risk

RiskLow risk
RequirementsFor computer-scope results run from an elevated prompt; add /scope computer or /scope user to limit output.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • gpresult | Microsoft Learn
    Microsoft · vendor-doc · 2026-09-17
    Evidence: Microsoft documents gpresult /r to display RSoP summary information for user and computer scope, and /h to save an HTML report.
  • GPRESULT - Windows CMD
    SS64 · technical · 2026-09-17
    Evidence: SS64 explains gpresult /r output showing applied GPOs, security groups, and the /h switch for a full HTML report.

Last verified: 2026-09-17 · Category: Security & Privacy

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17
Verify File Hashes with certutil -hashfile
Windowshashcmdsecurity

Built-in Windows command to compute MD5, SHA1 or SHA-256 hashes of any file.

Low risk ✓ 2026-09-17