Re: Refresh Group Policy Remotely

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jeff Swift (JeffSw_at_online.microsoft.com)
Date: 10/09/04 

Date: Fri, 8 Oct 2004 18:08:00 -0700

If you are using W2k3 write a batch script to run against the remote clients
to update their GPO setting.

For user force a logoff
For machine force a reboot

use gpupdate.exe

Here is a link to more information on the util. It is also on 2000 but not
as powerful

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/standard/proddocs/en-us/refrGP.asp 

-- 
<Jeff>
http://blogs.msdn.com/eec/
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of attached scripts or code is subject to the terms specified in the
Terms of Use posted at http://www.microsoft.com/info/cpyright.htm
"Duke Eidson" <DukeEidson@discussions.microsoft.com> wrote in message 
news:A0E4A446-38B4-40DF-B383-995CCC42BEB2@microsoft.com...
> Let me think on it...I'll get back to you.
>
> "Erik Szewczyk [MVP]" wrote:
>
>> How do you suggest that script be launched?
>>
>> Not that I'm suggesting it isnt possible, just that I cant think of a way 
>> to
>> force trigger a script that would accomplish what he is looking for 
>> without
>> the use of an additional/3rd party client on the machines (i.e. SMS).
>>
>> -Erik
>>
>> "Duke Eidson" wrote:
>>
>> > I believe it would be possible to create a script that would run 
>> > gpupdate on
>> > the remote computer(s). The Scripting Guys articles available on the 
>> > Technet
>> > website would be very helpful with this and I'm sure that it wouldn't 
>> > be too
>> > difficult. Good luck and let me know how it goes.  Duke
>> >
>> > "Erik Szewczyk [MVP]" wrote:
>> >
>> > > As far as I know there isnt a way to do this nativly within Windows 
>> > > Server
>> > > however you could always just increase the frequency of policy 
>> > > updates on the
>> > > clients by modifying the following setting:
>> > > Computer Configuration>Administrative Templates>System>Group 
>> > > Policy>Group
>> > > Policy Refresh Interval for Computers
>> > >
>> > > Ideally you could set the interval to whatever the longest acceptable
>> > > interval would be.  Just keep in mind that this will increase the 
>> > > traffic to
>> > > your domain controller(s) since the clients will connect looking for 
>> > > updates
>> > > more frequnetly.
>> > >
>> > > Cheers,
>> > > -Erik
>> > >
>> > > "AJD" wrote:
>> > >
>> > > > Is there a way to refresh a computers Group Policy
>> > > > settings remotely?  When I make GPO changes, I would like
>> > > > to be able to send a refresh command or something to the
>> > > > client(s) so they get the new update.  Right now as far
>> > > > as I can tell I'd either have to wait for Windows to do
>> > > > this on the timed interval or go to the machines and
>> > > > manually run the gpupdate command.
>> > > >
>> > > > any help would be appreciated.
>> > > >
>> > > > AJD
>> > > >

Relevant Pages

  • Re: slow logon
    ... > we have symantec av 10 and yes the software looks for updates from a> local ... > i told the programmer that the domain controller at each site will> check ... > update the time for the clients that talk to the dc as the logon> server. ... >>> We have a Start up script and a login script for users as well as ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow logon
    ... All clients are XP pro sp2. ... We have in house programs that the programmer designed and he setup the ... start up script in AD to apply updates to the clients machines which is ... Make sure that the script detects if that update already has been made, otherwise you may end up repeating the same task over and over... ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow logon
    ... in the logon time have been reduced so far. ... update the time for the clients that talk to the dc as the logon server. ... start up script in AD to apply updates to the clients machines which is ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow logon
    ... that i tell the software not to restart the services when new virus updates ... update the time for the clients that talk to the dc as the logon server. ... > We have a Start up script and a login script for users as well as> folder ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow logon
    ... DNS is AD integrated and we have dhcp servers ... All clients are XP pro sp2. ... Not everyday is updates applied ... Make sure that the script detects if that update already has been made, ...
    (microsoft.public.windows.server.active_directory)