We help IT Professionals succeed at work.

SEEING everything that is active in a Group Policy Object

I inherited a server for a small group (20 users).  I'm trying to understand the group policy that is assigned.  It just says STAFF and I know that there is drive maps and folder redirection in the same group policy object.  Is there a way to "see" all that is within this policy that is activated to affect the Staff?  There are so many items and possibilities.  How can I know and find everything in a list of some sort that is being applied?

thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Adam LeinssSystems Administrator

Commented:
1. Open CMD.  Type gpresult /h C:\temp\gpresult.html

and or

2. Open run command.  Type rsop.msc (Resultant set of policy).

Run these logged in as the user.
Top Expert 2016
Commented:
in the group policy management, select the policy you want, and select settings. it will show you everything that is set2020-01-02_12-32-04.png
Pete LongTechnical Consultant

Commented:
David is spot on! click 'show all' at the top.

</P>
Jarrod Adamsconsultant

Author

Commented:
Thanks David!  I was hoping it was that easy.  And I'm still glad I asked, even though I feel a little stupid for never clicking on that Settings tab.
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2018

Commented:
I don't agree. The result set of policy (as per Adam's comment) or GPO modeling is the method to see applied policies.

Just looking at one policy at a time will not give you a clear understanding of how and where settings are applied from
Adam LeinssSystems Administrator

Commented:
To be honest, I think the original question was a bit ambiguous and I took it as "How do I see what settings are being applied when logged in as an end-user", not "How do I see what settings are set in a GPO on the server-side".  Just because the GPO exists there with settings defined doesn't mean it's actually applying those settings, either due to not being linked to an OU, being filtered out via security principals or a WMI filter.  That's where RSOP/gpresult comes in to help troubleshoot.

In other words: I overthought the answer to a very simple question :)
Jarrod Adamsconsultant

Author

Commented:
Adam and Shaun you are correct.  I was taking a leap in logic to whatever was in my policy was being applied to the users.  Should have said SEE all that is in the GPO that is trying to be applied to the OU/users.  Thanks for your interest in this question.  I appreciate the detail.