Skip to content

Get-PSGPOResult

Gets what a computer and a user applied the last time, as Group Policy Results of GPMC.

The help of the command, as Get-Help Get-PSGPOResult -Full gives it.

Syntax

Get-PSGPOResult [[-ComputerName] <string>] [[-User] <string>] [[-Scope] <string>] [[-Path] <string>] [<CommonParameters>]

Description

The RSoP the computer logged: the GPOs of each part, applied with their precedence (1 wins) or denied with their reason (Disabled link, Disabled GPO, Denied (security), Empty, WMI filter false, Not valid), where they are linked; with gpresult, the security groups of the computer and the user, their SOM and site, the status of each client-side extension.

Windows: gpresult /x, on this computer or another one (-ComputerName; its firewall lets RSoP through), for the user given or the one running it; the computer part needs an administrator. Linux, a member of a domain: samba-gpupdate --rsop, which reads the policy with the machine account: root only (sudo pwsh); it also gives the settings of each GPO. -Path reads a file made elsewhere: the XML of gpresult /x, or what samba-gpupdate --rsop printed.

Parameters

-ComputerName

The computer, on Windows (gpresult /s); this computer when not given.

Type Required Position Default value Accepts pipeline input
String No 1 None No

-User

The user (DOMAIN\name): gpresult /user, samba-gpupdate -U; the one running it when not given.

Type Required Position Default value Accepts pipeline input
String No 2 None No

-Scope

Computer, User or All (default).

Type Required Position Default value Accepts pipeline input
String No 3 All No

-Path

A file to read in place of running gpresult or samba-gpupdate: the XML of gpresult /x, or the output of samba-gpupdate --rsop (one part: -Scope says which, Computer by default).

Type Required Position Default value Accepts pipeline input
String No 4 None No

Examples

Example 1

Get-PSGPOResult | Select-Object -ExpandProperty ComputerGpos | Format-Table Precedence, Name, Link, Reason

Example 2

Get-PSGPOResult -ComputerName PC-LYON-042 -User 'CONTOSO\jdoe'

Example 3

Get-PSGPOResult -Path ./rsop-computer.txt -Scope Computer

Outputs

  • PSGPOTools.Result