This message was deleted.

Join #powershell I'm sure there's a combination of using gpresult , repadmin /showrepl , someone there will be able to pinpoint the cmdlet you need, could be anything could be a replication issue, maybe some users in too many groups, a corrupt GPT in sysvol, could be a slow link

I would start with gpresult /R to see if the GPO is being applied on affected machines, check the group policy event log and system log for any group policy processing errors. Check the AD/Sysvol replication status of the GPO. The only command tool i know of for setting user rights assignments is ntrights.exe but its very old used to be in 2003 resource kit

BTW this report which you can generate via powershell is the sickest thing I've ever seen, not saying it is 100percent accurate but close enough - honestly you're look like a high level AD auditor running it.. https://evotec.xyz/the-only-command-you-will-ever-need-to-understand-and-fix-your-group-policies-gpo/

At this moment, we are only looking for the AD group in the policy. our windows team is already working on whether or not the gpo is applied, if already applied, why isnt the particular group not added to the policy etc.. We were told to check the servers if the group is added to the policy or not. As the faulty servers are random, we have to check all the servers for the group. So, i m looking for a way to automate it.

Ah seems to be slack - I do recall a tool called "The Security Compliance Manager tool" where you can export all the local gpo's and then import onto another device , this could be useful of local security policy isn't deployed via GPO would fix all the end user machines in one go..