How to count the result of AD GPO for all PC client

Question

For AD domain group policies issued, is there a way to count the effective status of all clients in the domain？Can I know how many client successfully implement this one AD GPO?

Answer 1

Hello,

Thank you for posting in Q&A forum.

Yes, you can determine the effectiveness of Group Policy Objects (GPOs) in an Active Directory (AD) domain by checking the Group Policy results on client machines.

You can use the Group Policy Results Wizard. Use the Group Policy Results Wizard to determine which Group Policy settings are in effect for a user or computer by obtaining RSoP data from the target computer.

To run the Group Policy Results Wizard, follow these steps.

1. Open GPMC, right-click Group Policy Results, and select Group Policy Results Wizard.

2.Select Next to get started.

3.Select This computer then select Next. Optionally, you can select Another computer and enter the computer name, then select Next.

4.Select Current user then select Next. Optionally, you can select Select a specific user and select the username from the list of users that have logged on to the computer. Select Next to continue.

5.Review the Summary of Selections screen, then select Next to run the Group Policy results.

6.Select Finish to complete the wizard.

For more details, see: Group Policy Modeling and Results in Windows | Microsoft Learn

You can also use the gpresult command-line toolGPResult command-line tool to verify which Group Policy Objects are applied to a user or computer. GPResult is a command-line tool that displays the resulting policy set for a Group Policy Object. For a more detailed report, you can run "gpresult /h report.html" to generate an HTML report.

For detailed steps, see: GPResult Tool: How To Check What Group Policy Objects are Applied - Active Directory Pro

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.