Introduction

If you want to see which Group Policies are applied to a client, you can run the RSOP command (Resultant Set of Policies).

You can also export the RSOP results can be accomplished via the GUI as well as via Powershell.

In this blog post, I explain how to export the results from RSOP to an HTML report using Powershell.

If you are interested in learning more about Powershell, I highly recommend watching a Pluralsight course on the topic.

What is the GPResult command?

GPResult, or Group Policy Result, is the result of all policies applied to the machine. The GPResult command displays the result of all policies applied on the device, both for the user and computer.

You should run GPResult if you want to understand what group policies are applied to the machine.

How to use GPResult to export results to a text file

Use the below command to export the GPResult output to a text file on the local computer. Note that you should run this from an elevated command prompt or elevated Powershell prompt to retrieve all the details:

gpresult >> c:\temp\gpresult.txt

What is the RSOP command line?

The RSOP or Resultant Set of Policies command gathers all Active Directory Group Policies for the user account and computer settings applied to a device.

This is similar to the gpresult command but shows the results in the same way you would when configuring a Group Policy.
The look and feel is similar to that of the Local Group Policy (gpedit.msc) and the Group Policy Manager MMC console in Active Directory.

How to export an RSOP report

Gather RSOP information using the command-line

Open an elevated command prompt (CMD) and run the command:

rsop
RSOP command in an administrative command prompt

RSOP will now gather which Group Policies have been applied for your client.

Note: As mentioned in the text, “Starting with Microsoft Windows Vista Service Pack 1 (SP1), the Resultant Set of Policies (RSOP) report does not show all Microsoft Group Policy settings. To see the full set of Microsoft Group Policy settings applied for a computer or user, use the command-line tool gpresult.
This means that it is OK to use RSOP, but if you want to be sure that all Groupm Policies are included, use gpresult instead.

Resultant set of Policies
Resultant set of Policies

Gather RSOP results using Powershell

If you prefer to use Powershell, open an elevated Powershell window, and use the Get-GPResultantSetOfPolicy cmdlet.

Export RSOP command to HTML using Powershell

In this example, I retrieve the Resultant Set of Policies (RSOP) for user Daniel in the Contoso domain, who uses the computer Windows10-Client. The output is in HTML, and the filename is D:\rsop.html.

Run the following command to save the report to an HTML file:

Get-GPResultantSetOfPolicy -user Contoso\Daniel -Computer Windows10-Client -ReportType Html -Path "D:\rsop.html" 

Conclusion

Using Powershell to export the results from RSOP is a much faster way than using the GUI. How do you export these results? Please leave a comment below!

If you are interested in learning more about Powershell, I highly recommend watching a Pluralsight course on the topic.

References

LEAVE A REPLY

Please enter your comment!
Please enter your name here