Solved

How can I force GPO updates to take effect on a OU?

Posted on 2006-11-14
12
685 Views
Last Modified: 2009-02-13
I would like to force a policy with Computer Configuration changes to a specific OU? How can I do this?
Thanks,
Chris
0
Comment
Question by:qwert5905
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +2
12 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 64 total points
ID: 17940858
First creat appropriate GPO, link GPO to OU and put computer accounts in this OU. Later you can use "gpupdate /force"  command line tool for forcing GPO settings. This command should be issued on client computer.
0
 

Author Comment

by:qwert5905
ID: 17941466
Thanks for the reply. Assuming that I have an OU named "Accounting" and a policy called "Firewall", how do I force this using if "gpupdate" if there are multiple computers in the OU? Are you stating that the "gpudate" will do this? If so, what would be the exact syntax?
Thanks,
Chris
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 62 total points
ID: 17941829
computer policies require a restart
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 3

Assisted Solution

by:lecutis
lecutis earned 62 total points
ID: 17942559
You can set the group policy as enforced. This will usually override all other group policies.

Using GPMC right click the group policy link and select enforced. If you have not installed the GPMC I do not know how to set this, but would highly recommend that you do install it.
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 62 total points
ID: 17943177
As already stated, most Computer Configuration settings require the workstation to be rebooted to be applied.

If you run GPRESULT on the workstations in this OU you should see your new policy even if the settings have not yet applied.  If this is the case, simply reboot the workstations.

You can do this remotely, if needed using a number of methods.

Easiest is to run: shutdown /i from the Run box then add the computer names to the top pane.  Use the dropdown to select Restart then hit OK.

Noet: you must be a member of the local Admin group on these workstations to be able to initiate a remote shutdown.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17944312
Hey NM thats an awesome tool.... I had never seen that switch before - as always - you are infinitely wiser!
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 17974041
"gpupdate /force /boot /logoff" will force new GPO settings and initiate reboot or logoff, if required.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 18385487
Listening.
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 19248466
Shouldn't this question be closed ages ago? ;)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

687 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question