Force GPO remotely

  • Thread starter Thread starter Altria
  • Start date Start date
A

Altria

Hello All,
Is there any way that i can force gpo updates remotely to a group or
specific computer
Thanx,
Altria
 
Altria,

There is no built in method to get this done. Of course, you can remotely
restart computers with some tools, and restart services (netlogon). However,
there is not built in method to force gpo application.
 
You could try to use the AT command to schedule a refresh. This may not be an
elegant method but should work if need be. The assumes you are an administrator
on the local machine. A command from your computer using a time shortly in the
future should work such as [AT \\computername 14:00 secedit /refreshpolicy
user_policy /enforce] to update user policy. Such a command would run once and
then be cleared. You could use Computer Management/Event Viewer application log
looking for Event ID 1704 on the remote computer to see if the policy has been
refreshed/applied. If you had to do that to a number of computers you could
create a batch file with multiple lines with the various computer names. ---
Steve
 
You could always use WMI to execute Gpupdate.exe on a computer remotely to
force an update. Here is a sample that you could build on to fill your
requirement

'**SCRIPT START
strComputer = "MyHost"
Set oWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &
strComputer & "\root\cimv2")
Set process=oWMIService.Get("Win32_Process")
process.create "GPUpdate.exe","c:\windows\System32"
'**SCRIPT END

Good luck

Niclas Lindblom
 
Excellent script ! Thx Niclas

Just a precision, if you want to apply your GPO immediately, add /force connecto

'**SCRIPT STAR
strComputer = "MyHost
Set oWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2"
Set process=oWMIService.Get("Win32_Process"
process.create "GPUpdate.exe /force","c:\windows\System32
'**SCRIPT EN

Maxence
 
Back
Top