Resultant Set of Policy (RSoP) is a summary listing of group policies that have been applied to a user or computer. Windows Server 2003 includes a wizard to generate RSoP queries to determine what policies are being applied, or would be applied. There are two modes for RSoP.

Logging Mode will report the group policies that are being applied to a user or computer. You would use logging mode to document what settings are being applied, or to troubleshoot failed policies, or policies that are being overridden. You can also use it to see how security group membership affects policy application. Planning Mode will report what group polices would be applied to a user or computer. You could use this mode to plan and test prospective group policy object creation or changes, the effect of moving a user or computer into a different OU or security group. You could also use it to simulate slow link detection and a new feature called loopback processing. Loopback processing is a new feature that allows you to specify Merge to merge the computer group policy with the users group policy, or Replace to replace the users group policy with the computers. To run an RSoP query, open up an empty MMC and add the Resultant Set of Policy stand alone snap-in. Right-click the RSoP icon and select Generate RSoP Data.

The RSoP wizard will begin. Select Logging or Planning mode, and press next. If you are running the RSoP query on a workstation, as I am in this example, you will not be able to do select Planning Mode. Planning Mode is only available when performing RSoP queries on a DC. Note: If you selected planning mode you will also be given options to select a container instead of a user/computer account, as well as options for slow link detection and loopback processing.

Select the computer you wish to run the query against, click Next.

Select the user and click Next again.

Look over the Summary of Selections to ensure you have selected the correct mode, computer and user and then click Next.

The RSoP query will run and the data will be generated and made viewable.

The RSoP results are displayed as they would be in the Group Policy Editor, however, only GPO settings that are being applied will show up. Once it has completed you can save the query by selecting File --> Save. This will save the RSoP query to the Administrative Tools menu and allow you to run the query again in the future. If you would like to save the data the query spit out, right-click the user/computer account-RSoP node and select View --> Archive Data in Console File. This will save the data and place a shortcut in Administrative Tools as well.

For more information see: Resource Kit - Resultant Set of Policy Tools