Question

Difficulty: MediumMicrosoft Command-Line Tools

A helpdesk technician is troubleshooting user permission and account restrictions on a Windows 11 workstation following an Active Directory domain policy modification. The technician needs to view a summary report of the Resultant Set of Policy (RSoP) directly within the command prompt to verify which specific Group Policy Objects (GPOs) and security groups are active for the currently logged-in user. Which of the following commands should the technician execute?

  1. gpresult /rAnswer
  2. B
    gpupdate /force
  3. C
    rsop.msc
  4. D
    id -a

Answer

The command `gpresult /r` is the correct utility to display Resultant Set of Policy (RSoP) summary information in the Windows command prompt.
The `gpresult /r` command queries the Resultant Set of Policy (RSoP) engine and prints a summary report in the command prompt. This output details the specific Group Policy Objects (GPOs) applied to both the user and computer, as well as the user's security group memberships.

Step-by-Step Solution

1
Identify the primary objective.
The technician needs to inspect active Group Policy Objects and security group memberships for a user from the command line.
Viewing active policy enforcement requires querying Resultant Set of Policy (RSoP) data.
2
Select the appropriate utility and parameter.
`gpresult /r` prints the summary RSoP report to standard output inside the terminal.
The `/r` switch directs `gpresult` to output a concise textual summary of applied user and computer policies.

Key Concept

Windows Command-Line Policy Auditing (gpresult)
Rate this question