Windows Server / Active Directory & Group Policy
Investigate a server setting managed by Group Policy
A local change can be reverted by policy and create a recurring incident. Inspect applied computer and user policy before editing the setting again.
Environment and inputs: Windows Server 2022 / 2025 baseline · Windows PowerShell with the specified role or RSAT modules; native utilities are identified in the text. Use delegated administration and elevation only where required.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
gpresult /r /scope computerRead the result
Run with appropriate elevation on the affected server. The result summarizes applied computer policy; a detailed report may be needed for one setting's winning policy.
Resolve and verify
Compare policy scope, filtering and organizational-unit placement with the approved server group. Request a change to the controlling policy rather than fighting it locally.
Before changing production
Do not move the server's AD object or disable inheritance without reviewing all affected security and configuration settings.