Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 342
  • Last Modified:

Group Policy Update question

I need users to have their computer's updated by a central AD group policy setting. Would you be able to force a GP update on all user computers via a script or your software? I'd rather not have users typing gpupdate /force etc.

Please let me know if anyone has any ideas on this?
0
CRL ltd
Asked:
CRL ltd
1 Solution
 
Cliff GaliherCommented:
Group policies auto-refresh. You can use gpupdate to force a refresh, and that is helpful during testing, but usually it isn't required to script it or force end users to refresh. Just let it happen as it was meant to.
0
 
Daniel HelgenbergerCommented:
I use SpecOps GP Update; the free version can do so also:
http://www.specopssoft.com/products/specops-gpupdate-professional
Since I need to run gpupdate on demand (I think you need that too), select the necessary computers in active directory users and computers MSC, right click and run it from context  menu.
It can also do WOL, shutdowns and WSUS updates in the free version- really handy.
0
 
Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
GPOs are updated every 90 minutes with a random offset of up to 30 minutes.  If this is not acceptable in your environment then you could lower it (I wouldn't lower it less than 60).

If you want on-demand GPO updates then use the freeware from SpecOps.
0
 
violageekCommented:
If you are using Server 2012 (R2), GP refresh is buit-in to the Group Policy Management console. Just right click on the OU where your users/computers reside and you will see the option to send the group policy refresh.

For earlier versions you can also force it by using GPUPDATE itself with switches like:

gpupdate /targer:ComputerName /force

You can also use powershell to automate it for all machines under a certain OU by something like:

Get-ADComputer –filter * -Searchbase "OU=Workstations, DC=YOURDOMAIN,dc=COM" | foreach{ Invoke-GPUpdate –computer $_.name -force}

Another alternate is PsExec which is used to invoke any command on a remote machine (with proper firewall settings applied). Specops will be the best option if you want something software based.
0
 
SandeshdubeySenior Server EngineerCommented:
By default, computer Group Policy is updated in the background every 90 minutes.see this for more details:http://technet.microsoft.com/en-us/library/cc940895.aspx.

There are certain gpo which requires reboot of client computer if the policy is applied at computer level or relogin if the policy is applied at user level.Sometimes just running gpupdate will not work.

What policy you have applied?Are the policy not working kindly provide more info.

Also suggested by violageek Win2012 has new feature where gpupdate can be excuted from GPMC but it seems you dont have Win2012 server.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now