Gets one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.
Active Directory · Risk: Low · Documentation Verified
Last verified: 2026-10-26
Microsoft GroupPolicy reference: Gets one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Get-GPRegistryValue. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / GroupPolicy · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-Domain
Specifies the domain for this cmdlet. You must specify the fully qualified domain name (FQDN) of the domain (for instance: sales.contoso.com). For the Get-GPRegistryValue cmdlet, the GPO for which to get registry-based policy settings must exist in this domain. If you do not specify the Domain parameter, the domain of the user that is running the current session is used. If the cmdlet is being run from a computer startup or shutdown script, the domain of the computer is used. For more information, see the Notes section in the full Help. If you specify a domain that is different from the domain of the user that is running the current session (or, for a startup or shutdown script, the computer), a trust must exist between that domain and the domain of the user or the computer. You can also refer to Domain by its built-in alias, DomainName. For more information, see about_Aliases.
-Guid (required)
Specifies the GPO from which to retrieve the registry-based policy setting by its globally unique identifier (GUID). The GUID uniquely identifies the GPO. You can also refer to the Guid parameter by its built-in alias, Id. For more information, see about_Aliases.
-Key (required)
Specifies the registry key for which this cmdlet gets the registry-based policy setting. For instance: HKLM\Software\Policies\Microsoft\Windows NT\DNSClient. The key must be in one of the two following registry hives: - HKEY_LOCAL_MACHINE (HKLM) for a registry-based policy setting in Computer Configuration. - HKEY_CURRENT_USER (HKCU) for a registry-based policy setting in User Configuration. You can specify: - The Key parameter without the ValueName parameter to get all the registry-based policy settings that configure values directly under that key. - The Key parameter together with the ValueName parameter to get the registry-based policy setting that configures a specific registry value. You can also refer to the Key parameter by its built-in alias FullKeyPath. For more information, see about_Aliases.
-Name (required)
Specifies the GPO from which this cmdlet gets the registry-based policy setting by its display name. The display name is not guaranteed to be unique in the domain. If another GPO with the same display name exists in the domain an error occurs. You can use the Guid parameter to uniquely identify a GPO. You can also refer to the Name parameter by its built-in alias, DisplayName. For more information, see about_Aliases.
-Server
Specifies the name of the domain controller that this cmdlet contacts to complete the operation. You can specify either the fully qualified domain name (FQDN) or the host name. If you do not specify the name by using the Server parameter, the primary domain controller (PDC) emulator is contacted.
-ValueName
Specifies the name of a registry value for which this cmdlet gets the registry-based policy setting. For instance, the registry key HKLM\Software\Policies\Microsoft\Windows NT\DNSClient can have a value with the following name: UseDomainNameDevolution. For the default value of a registry key, specify "(default)" or an empty string (""). You must also specify the Key parameter with this parameter.
Prerequisites
Windows with the GroupPolicy module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This is a read-oriented cmdlet; protect any sensitive results and check the documented effects of your selected parameters.
Examples
Example 1: Get the group policy registry value from the specified key
Get-GPRegistryValue @params
This command gets the registry-based policy setting that configures the registry value HKEY_CURRENT_USER\Software\Policies\Microsoft\ExampleKey:ValueOne from User Configuration in the GPO named TestGPO. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.