Need more information, like a specific setting you're looking for.
FYI, on Windows servers in Security Settings we capture "Local setting..." and "Effective setting..." Local Setting is the current setting on the server. Effective Setting is what is being pushed by Policy. Or, if there is no Policy, it's the default Local Setting.
In my experience, almost every Security Setting is tied to a Registry Key/Value. And the Registry Key/Value is the authority. It takes some research at times to tie the Security Setting to the Registry setting.
If you post exactly what you're trying to find or compare, we can offer suggestions. But your question is a bit vague.
you could write an extended object that runs gpresult ?