Solved

How can I force GPO updates to take effect on a OU?

Posted on 2006-11-14
12
684 Views
Last Modified: 2009-02-13
I would like to force a policy with Computer Configuration changes to a specific OU? How can I do this?
Thanks,
Chris
0
Comment
Question by:qwert5905
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +2
12 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 64 total points
ID: 17940858
First creat appropriate GPO, link GPO to OU and put computer accounts in this OU. Later you can use "gpupdate /force"  command line tool for forcing GPO settings. This command should be issued on client computer.
0
 

Author Comment

by:qwert5905
ID: 17941466
Thanks for the reply. Assuming that I have an OU named "Accounting" and a policy called "Firewall", how do I force this using if "gpupdate" if there are multiple computers in the OU? Are you stating that the "gpudate" will do this? If so, what would be the exact syntax?
Thanks,
Chris
0
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 62 total points
ID: 17941829
computer policies require a restart
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 3

Assisted Solution

by:lecutis
lecutis earned 62 total points
ID: 17942559
You can set the group policy as enforced. This will usually override all other group policies.

Using GPMC right click the group policy link and select enforced. If you have not installed the GPMC I do not know how to set this, but would highly recommend that you do install it.
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 62 total points
ID: 17943177
As already stated, most Computer Configuration settings require the workstation to be rebooted to be applied.

If you run GPRESULT on the workstations in this OU you should see your new policy even if the settings have not yet applied.  If this is the case, simply reboot the workstations.

You can do this remotely, if needed using a number of methods.

Easiest is to run: shutdown /i from the Run box then add the computer names to the top pane.  Use the dropdown to select Restart then hit OK.

Noet: you must be a member of the local Admin group on these workstations to be able to initiate a remote shutdown.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17944312
Hey NM thats an awesome tool.... I had never seen that switch before - as always - you are infinitely wiser!
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 17974041
"gpupdate /force /boot /logoff" will force new GPO settings and initiate reboot or logoff, if required.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 18385487
Listening.
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 19248466
Shouldn't this question be closed ages ago? ;)
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question