I first mentioned the Gpresult.exe tool in tip 3302 and link.

Microsoft has provided the Gpresult.exe tool as freeware:

"This command-line tool displays information about the result Group Policy has had on the current computer and logged-on user.

GPResult provides the following general information:

  • Operating System
    • Type (Professional, Server, Domain Controller).
    • Build number and Service Pack details.
    • Whether Terminal Services is installed and, if so, the mode it is using.
  • User Information
    • User name and location in Active Directory (if applicable).
    • Domain name and type (Windows 2000 or Windows NT).
    • Site name.
    • Whether the user has a local or roaming profile and location of the profile.
    • Security group membership.
    • Security privileges.
  • Computer Information
    • Computer name and location in Active Directory (if applicable).
    • Domain name and type (Windows 2000 or Windows NT).
    • Site name.

GPResult also provides the following information about Group Policy:

  • The last time policy was applied and the domain controller that applied policy, for the user and computer.
  • The complete list of applied Group Policy objects and their details, including a summary of the extensions that each Group Policy object contains.
  • Registry settings that were applied and their details.
  • Folders that are re-directed and their details.
  • Software management information detailing assigned and published applications.
  • Disk quota information.
  • IP Security settings.
  • Scripts."