← Back to docs
Tools - Configuration•Updated: November 23, 2024

GPResult /h gpresult.html

Get a clear report of your Group Policy settings in HTML format.

GPResult /h gpresult.html

Command: GPResult /h gpresult.html

Category: Configuration

Type: CMD

Purpose

Generates a comprehensive HTML report of Group Policy settings applied to the computer and user. This report shows which policies are active, where they come from, and detailed configuration information, making it invaluable for troubleshooting Group Policy issues.

Quick Summary

Create a detailed, easy-to-read HTML report of all Group Policy settings affecting your computer and user account. See which policies are applied, from which Group Policy Objects (GPOs), security filtering, WMI filters, and more. Essential for enterprise environments and troubleshooting policy problems.

How to Use

Basic usage:

  1. Open Command Prompt as Administrator.
  2. Type GPResult /h gpresult.html and press Enter.
  3. The report is saved to the current directory.
  4. Open gpresult.html in a web browser to view.

Save to a specific location:

GPResult /h C:\Reports\gpresult.html

Get results for a specific user:

GPResult /h gpresult.html /user USERNAME

Include super verbose information:

GPResult /h gpresult.html /f

Tips and Best Practices

  • Run as Administrator to get complete computer policy information.
  • Save reports to a specific folder for organization: GPResult /h C:\GPReports\report.html
  • The HTML format is much easier to read than the console output.
  • Use /scope:computer or /scope:user to limit the report to one or the other.
  • Compare reports before and after policy changes to see what changed.
  • Share the HTML report with support teams when troubleshooting policy issues.
  • The report includes useful links to policy settings and Microsoft documentation.

Common Use Cases

  • Policy troubleshooting: Determine why a specific policy isn't applying or why a setting is configured a certain way.
  • Policy auditing: Document which policies are applied to computers and users.
  • Compliance verification: Verify that required policies are being applied correctly.
  • Before/after comparison: Compare policy states before and after changes.
  • Support documentation: Provide detailed policy information to support teams.

Prerequisites

  • Windows Command Prompt or PowerShell
  • Administrator rights recommended to see all policy information
  • Group Policy must be enabled (typically in domain environments)
  • Available on all modern Windows versions

Report Sections Explained

  • Summary: Overview of computer and user policy application status
  • Computer Details: Computer name, domain, site, and last time policies were applied
  • User Details: Username, domain, and last policy application time
  • Security Group Membership: Groups affecting policy application
  • Applied GPOs: List of all GPOs applied and their sources
  • Denied GPOs: GPOs that were blocked from applying (with reasons)
  • Policy Settings: Detailed configuration of all applied policy settings
  • WMI Filters: Any WMI filters affecting policy application
  • Component Status: Status of Group Policy extensions

Troubleshooting

  • "Access is denied" - Run Command Prompt as Administrator.
  • Report shows no policies - Computer may not be in a domain, or policies haven't been applied yet; try running gpupdate /force first.
  • File already exists error - Use /f parameter to overwrite: GPResult /h gpresult.html /f
  • Policies expected but not shown - Check security filtering, WMI filters, and GPO links in the report.
  • "Group Policy results completed successfully" - The report was created; look for the HTML file.

Other Useful GPResult Parameters

  • GPResult /r - Display summary RSoP (Resultant Set of Policy) data in console
  • GPResult /v - Verbose output in console
  • GPResult /z - Super verbose output (includes all available information)
  • GPResult /scope:user - Show only user policies
  • GPResult /scope:computer - Show only computer policies
  • gpupdate /force - Force immediate Group Policy refresh
  • gpedit.msc - Local Group Policy Editor (non-domain computers)
  • gpmc.msc - Group Policy Management Console (domain controllers)
  • rsop.msc - Resultant Set of Policy GUI tool (deprecated, use GPResult)