Shavlik Script Catalog: Get Client Computer Group Policies

Version 5

    Author: Shavlik
    Category: Support
    Inputs: None
    Minimum ITScripts engine version required:
    Modifies the target machine: No
    Name: Get Client Computer Group Policies
    Outputs: HTML file containing group policy information.

    Purpose: Get computer group policies from remote systems.  Executes only against computers that are

    members of a domain.

    Script Version:

    Target Type: Any


    Technical Description:

    This script will query a target machine to determine what policies are currently being enforced on the target.  Often in troubleshooting GPO issues an Administrator would need to determine what is configured in Group Policy, what GPOs are being pushed to the target machine, and what the local machine is actually configured as.  vCenter Protect Essentials Plus - Configuration Management verifies the local machines settings.  This script verifies the policies pushed to the target.  For Essentials Plus customers this gives visibility into the two most difficult parts of troubleshooting Group Policy issues.


    The script begins by verifying the OS.  Depending on the OS the script will execute gpresult.exe with the proper switches and return the results.  Vista and above, XP, and 2000 all use slightly different switches, but here is the example command line for Vista+ OSs:



    "cmd /c $OSPathSystem32gpresult.exe /scope Computer /user $userName /h $file_target"



    Possible results include:

    "WMI connection to the target machine failed.  The machine may be offline."

    "GPResult.exe failed or did not complete in the allowed time"


    Successful gpresult queries will generate a per machine result viewable in the ITScript Results view.  Find the script run and right click on the machine you want to view a result for and view machine result.