Force GPO update
hi guys, if i had updated the policy on a DC, then i want the update to enforced immediately to all domain clients. At the DC level, if i type gpupdate /force will at apply the GPO update to domain clients? or what command do i type at the DC level to force
the update to be applied at once?
thanks in advance. :)
June 20th, 2011 10:47am
gpupdate /force - will only refresh the policies on a computer on which you executed the command.
to update clients GP from DC you can use for example PSExec from sysinternals psexec
\\computerName gpupdate
However please remember that not all settings can be applied like this, some settings user logoff (this can be done via gpupdate /logoff) and some requires computer restart (gpupdate /boot)
With kind regards
Krystian Zieja
http://www.projectnenvision.com
Follow me on twitter
My Blog
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2011 10:54am
Hi Zieja, thanks for your reply..
so psexec will targent per client computer..is there a tool or is there a way to target all clients on the DC instead of per PC? thanks again.
June 20th, 2011 9:36pm
Hi,
The following article might be helpful to you.
How to Force Remote Group Policy Processing
http://www.windowsecurity.com/articles/how-force-remote-group-policy-processing.html
BrentPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2011 10:06pm
Hi brent, thanks for the link. I guess there's no easy way to do it. need some scripting to accomplish such task that i wanted. :)
June 27th, 2011 5:36am