220-1102 Question 127
Single answergpresultA technician is troubleshooting a Windows 10 laptop that is joined to an Active Directory domain. A user reports that a new password policy and desktop lock screen setting were supposed to apply after the computer was moved to a different organizational unit, but the settings still appear unchanged. The technician wants to verify which Group Policy Objects are actually being applied to the user and the computer from the local machine. Which command should the technician run first to generate a readable summary of the Resultant Set of Policy?
- A
gpupdate /force
- B
gpresult /r
- C
sfc /scannow
- D
net user /domain
Show answer and explanation
Correct answer: B
Explanation
When troubleshooting Group Policy on a domain-joined Windows device, a common best practice is to verify what policies are actually applied before making changes. The gpresult command is designed for this purpose. Using gpresult /r provides a concise Resultant Set of Policy summary for both the user and computer contexts, helping the technician confirm whether the expected GPOs are in effect or whether filtering, OU placement, or inheritance issues may be preventing application. If more detail is needed, technicians may also use gpresult /h to generate an HTML report. Microsoft documents gpresult as a command-line tool for displaying Resultant Set of Policy information, making it the appropriate troubleshooting tool in this scenario.
- A. Incorrect.
This command refreshes Group Policy by reapplying computer and user policies, but it does not show a summary of which GPOs are currently applied. A technician may run this later to force policy processing, but it is not the best first step when the goal is to verify the current Resultant Set of Policy.
- B. Correct.
This is correct. The gpresult /r command displays a readable summary of the Resultant Set of Policy (RSoP) for the current user and computer, including applied GPOs and filtering information. It is a practical first step when confirming whether the expected policies are being processed on a domain-joined Windows system.
- C. Incorrect.
This command checks and repairs protected Windows system files. It is useful for OS corruption issues, but it does not provide any information about Group Policy processing or applied GPOs.
- D. Incorrect.
This command can display information about a domain user account, such as password settings or account details, but it does not report which Group Policy Objects are applied to the current system or user session.