Refresh Group Policy Remotely

Is there a way to refresh a computers Group Policy
settings remotely? When I make GPO changes, I would like
to be able to send a refresh command or something to the
client(s) so they get the new update. Right now as far
as I can tell I'd either have to wait for Windows to do
this on the timed interval or go to the machines and
manually run the gpupdate command.

any help would be appreciated.

AJD

Hi,

One option would be to use PS Tools from www.sysinternals.com (free tools).

These tools (psexec) will allow you to execute any command on remote
computer (if there are no firewalls between you and the client)...

I hope this helps,

Mike

"AJD" <anonymous@discussions.microsoft.com> wrote in message
news:2b4301c4a8b7$d50606c0$a401280a@phx.gbl...
> Is there a way to refresh a computers Group Policy
> settings remotely? When I make GPO changes, I would like
> to be able to send a refresh command or something to the
> client(s) so they get the new update. Right now as far
> as I can tell I'd either have to wait for Windows to do
> this on the timed interval or go to the machines and
> manually run the gpupdate command.
>
> any help would be appreciated.
>
> AJD

As far as I know there isnt a way to do this nativly within Windows Server
however you could always just increase the frequency of policy updates on the
clients by modifying the following setting:
Computer Configuration>Administrative Templates>System>Group Policy>Group
Policy Refresh Interval for Computers

Ideally you could set the interval to whatever the longest acceptable
interval would be. Just keep in mind that this will increase the traffic to
your domain controller(s) since the clients will connect looking for updates
more frequnetly.

Cheers,
-Erik

"AJD" wrote:

> Is there a way to refresh a computers Group Policy
> settings remotely? When I make GPO changes, I would like
> to be able to send a refresh command or something to the
> client(s) so they get the new update. Right now as far
> as I can tell I'd either have to wait for Windows to do
> this on the timed interval or go to the machines and
> manually run the gpupdate command.
>
> any help would be appreciated.
>
> AJD
>

I believe it would be possible to create a script that would run gpupdate on
the remote computer(s). The Scripting Guys articles available on the Technet
website would be very helpful with this and I'm sure that it wouldn't be too
difficult. Good luck and let me know how it goes. Duke

"Erik Szewczyk [MVP]" wrote:

> As far as I know there isnt a way to do this nativly within Windows Server
> however you could always just increase the frequency of policy updates on the
> clients by modifying the following setting:
> Computer Configuration>Administrative Templates>System>Group Policy>Group
> Policy Refresh Interval for Computers
>
> Ideally you could set the interval to whatever the longest acceptable
> interval would be. Just keep in mind that this will increase the traffic to
> your domain controller(s) since the clients will connect looking for updates
> more frequnetly.
>
> Cheers,
> -Erik
>
> "AJD" wrote:
>
> > Is there a way to refresh a computers Group Policy
> > settings remotely? When I make GPO changes, I would like
> > to be able to send a refresh command or something to the
> > client(s) so they get the new update. Right now as far
> > as I can tell I'd either have to wait for Windows to do
> > this on the timed interval or go to the machines and
> > manually run the gpupdate command.
> >
> > any help would be appreciated.
> >
> > AJD
> >

How do you suggest that script be launched?

Not that I'm suggesting it isnt possible, just that I cant think of a way to
force trigger a script that would accomplish what he is looking for without
the use of an additional/3rd party client on the machines (i.e. SMS).

-Erik

"Duke Eidson" wrote:

> I believe it would be possible to create a script that would run gpupdate on
> the remote computer(s). The Scripting Guys articles available on the Technet
> website would be very helpful with this and I'm sure that it wouldn't be too
> difficult. Good luck and let me know how it goes. Duke
>
> "Erik Szewczyk [MVP]" wrote:
>
> > As far as I know there isnt a way to do this nativly within Windows Server
> > however you could always just increase the frequency of policy updates on the
> > clients by modifying the following setting:
> > Computer Configuration>Administrative Templates>System>Group Policy>Group
> > Policy Refresh Interval for Computers
> >
> > Ideally you could set the interval to whatever the longest acceptable
> > interval would be. Just keep in mind that this will increase the traffic to
> > your domain controller(s) since the clients will connect looking for updates
> > more frequnetly.
> >
> > Cheers,
> > -Erik
> >
> > "AJD" wrote:
> >
> > > Is there a way to refresh a computers Group Policy
> > > settings remotely? When I make GPO changes, I would like
> > > to be able to send a refresh command or something to the
> > > client(s) so they get the new update. Right now as far
> > > as I can tell I'd either have to wait for Windows to do
> > > this on the timed interval or go to the machines and
> > > manually run the gpupdate command.
> > >
> > > any help would be appreciated.
> > >
> > > AJD
> > >

You can use psexec from PS Tools from www.sysinternals.com to execute vbs or
other executables...

You could also directly use psexec to run gpupdate /force since psexec can
run the command and arguments...

For details look at http://www.sysinternals.com/ntw2k/freeware/psexec.shtml

Mike

"Erik Szewczyk [MVP]" <ErikSzewczykMVP@discussions.microsoft.com> wrote in
message news:964175F3-4922-4E0E-B166-918E4D9A182D@microsoft.com...
> How do you suggest that script be launched?
>
> Not that I'm suggesting it isnt possible, just that I cant think of a way
to
> force trigger a script that would accomplish what he is looking for
without
> the use of an additional/3rd party client on the machines (i.e. SMS).
>
> -Erik
>
> "Duke Eidson" wrote:
>
> > I believe it would be possible to create a script that would run
gpupdate on
> > the remote computer(s). The Scripting Guys articles available on the
Technet
> > website would be very helpful with this and I'm sure that it wouldn't be
too
> > difficult. Good luck and let me know how it goes. Duke
> >
> > "Erik Szewczyk [MVP]" wrote:
> >
> > > As far as I know there isnt a way to do this nativly within Windows
Server
> > > however you could always just increase the frequency of policy updates
on the
> > > clients by modifying the following setting:
> > > Computer Configuration>Administrative Templates>System>Group
Policy>Group
> > > Policy Refresh Interval for Computers
> > >
> > > Ideally you could set the interval to whatever the longest acceptable
> > > interval would be. Just keep in mind that this will increase the
traffic to
> > > your domain controller(s) since the clients will connect looking for
updates
> > > more frequnetly.
> > >
> > > Cheers,
> > > -Erik
> > >
> > > "AJD" wrote:
> > >
> > > > Is there a way to refresh a computers Group Policy
> > > > settings remotely? When I make GPO changes, I would like
> > > > to be able to send a refresh command or something to the
> > > > client(s) so they get the new update. Right now as far
> > > > as I can tell I'd either have to wait for Windows to do
> > > > this on the timed interval or go to the machines and
> > > > manually run the gpupdate command.
> > > >
> > > > any help would be appreciated.
> > > >
> > > > AJD
> > > >

Let me think on it...I'll get back to you.

"Erik Szewczyk [MVP]" wrote:

> How do you suggest that script be launched?
>
> Not that I'm suggesting it isnt possible, just that I cant think of a way to
> force trigger a script that would accomplish what he is looking for without
> the use of an additional/3rd party client on the machines (i.e. SMS).
>
> -Erik
>
> "Duke Eidson" wrote:
>
> > I believe it would be possible to create a script that would run gpupdate on
> > the remote computer(s). The Scripting Guys articles available on the Technet
> > website would be very helpful with this and I'm sure that it wouldn't be too
> > difficult. Good luck and let me know how it goes. Duke
> >
> > "Erik Szewczyk [MVP]" wrote:
> >
> > > As far as I know there isnt a way to do this nativly within Windows Server
> > > however you could always just increase the frequency of policy updates on the
> > > clients by modifying the following setting:
> > > Computer Configuration>Administrative Templates>System>Group Policy>Group
> > > Policy Refresh Interval for Computers
> > >
> > > Ideally you could set the interval to whatever the longest acceptable
> > > interval would be. Just keep in mind that this will increase the traffic to
> > > your domain controller(s) since the clients will connect looking for updates
> > > more frequnetly.
> > >
> > > Cheers,
> > > -Erik
> > >
> > > "AJD" wrote:
> > >
> > > > Is there a way to refresh a computers Group Policy
> > > > settings remotely? When I make GPO changes, I would like
> > > > to be able to send a refresh command or something to the
> > > > client(s) so they get the new update. Right now as far
> > > > as I can tell I'd either have to wait for Windows to do
> > > > this on the timed interval or go to the machines and
> > > > manually run the gpupdate command.
> > > >
> > > > any help would be appreciated.
> > > >
> > > > AJD
> > > >

If you are using W2k3 write a batch script to run against the remote clients
to update their GPO setting.

For user force a logoff
For machine force a reboot

use gpupdate.exe

Here is a link to more information on the util. It is also on 2000 but not
as powerful

http://www.microsoft.com/resources/d...-us/refrGP.asp

--
<Jeff>

http://blogs.msdn.com/eec/

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of attached scripts or code is subject to the terms specified in the
Terms of Use posted at http://www.microsoft.com/info/cpyright.htm

"Duke Eidson" <DukeEidson@discussions.microsoft.com> wrote in message
news:A0E4A446-38B4-40DF-B383-995CCC42BEB2@microsoft.com...
> Let me think on it...I'll get back to you.
>
> "Erik Szewczyk [MVP]" wrote:
>
>> How do you suggest that script be launched?
>>
>> Not that I'm suggesting it isnt possible, just that I cant think of a way
>> to
>> force trigger a script that would accomplish what he is looking for
>> without
>> the use of an additional/3rd party client on the machines (i.e. SMS).
>>
>> -Erik
>>
>> "Duke Eidson" wrote:
>>
>> > I believe it would be possible to create a script that would run
>> > gpupdate on
>> > the remote computer(s). The Scripting Guys articles available on the
>> > Technet
>> > website would be very helpful with this and I'm sure that it wouldn't
>> > be too
>> > difficult. Good luck and let me know how it goes. Duke
>> >
>> > "Erik Szewczyk [MVP]" wrote:
>> >
>> > > As far as I know there isnt a way to do this nativly within Windows
>> > > Server
>> > > however you could always just increase the frequency of policy
>> > > updates on the
>> > > clients by modifying the following setting:
>> > > Computer Configuration>Administrative Templates>System>Group
>> > > Policy>Group
>> > > Policy Refresh Interval for Computers
>> > >
>> > > Ideally you could set the interval to whatever the longest acceptable
>> > > interval would be. Just keep in mind that this will increase the
>> > > traffic to
>> > > your domain controller(s) since the clients will connect looking for
>> > > updates
>> > > more frequnetly.
>> > >
>> > > Cheers,
>> > > -Erik
>> > >
>> > > "AJD" wrote:
>> > >
>> > > > Is there a way to refresh a computers Group Policy
>> > > > settings remotely? When I make GPO changes, I would like
>> > > > to be able to send a refresh command or something to the
>> > > > client(s) so they get the new update. Right now as far
>> > > > as I can tell I'd either have to wait for Windows to do
>> > > > this on the timed interval or go to the machines and
>> > > > manually run the gpupdate command.
>> > > >
>> > > > any help would be appreciated.
>> > > >
>> > > > AJD
>> > > >

You can use the schtasks command to run a task on a remote computer. So you
can use it to run GPUpdate on the remote machines. At least I think this
would work. Sorry it took so long to get back to you. Duke

"Erik Szewczyk [MVP]" wrote:

> How do you suggest that script be launched?
>
> Not that I'm suggesting it isnt possible, just that I cant think of a way to
> force trigger a script that would accomplish what he is looking for without
> the use of an additional/3rd party client on the machines (i.e. SMS).
>
> -Erik
>
> "Duke Eidson" wrote:
>
> > I believe it would be possible to create a script that would run gpupdate on
> > the remote computer(s). The Scripting Guys articles available on the Technet
> > website would be very helpful with this and I'm sure that it wouldn't be too
> > difficult. Good luck and let me know how it goes. Duke
> >
> > "Erik Szewczyk [MVP]" wrote:
> >
> > > As far as I know there isnt a way to do this nativly within Windows Server
> > > however you could always just increase the frequency of policy updates on the
> > > clients by modifying the following setting:
> > > Computer Configuration>Administrative Templates>System>Group Policy>Group
> > > Policy Refresh Interval for Computers
> > >
> > > Ideally you could set the interval to whatever the longest acceptable
> > > interval would be. Just keep in mind that this will increase the traffic to
> > > your domain controller(s) since the clients will connect looking for updates
> > > more frequnetly.
> > >
> > > Cheers,
> > > -Erik
> > >
> > > "AJD" wrote:
> > >
> > > > Is there a way to refresh a computers Group Policy
> > > > settings remotely? When I make GPO changes, I would like
> > > > to be able to send a refresh command or something to the
> > > > client(s) so they get the new update. Right now as far
> > > > as I can tell I'd either have to wait for Windows to do
> > > > this on the timed interval or go to the machines and
> > > > manually run the gpupdate command.
> > > >
> > > > any help would be appreciated.
> > > >
> > > > AJD
> > > >