I would like to present three different methods for remotely updating Group Policy (GPO):
1.
PsExec \\Computername Gpupdate
This window will be visible for 3 to 5 seconds:
As a bonus, this option will also display the number of computers in the OU, as well as all sub-OUs, which could be a useful and surprising feature!
1.
PsExec \\Computername Gpupdate
This window will be visible for 3 to 5 seconds:
- In the Group Policy Management Console (GPMC) of Windows Server 2012 and later, there is a lesser-known option to update a GPO by right-clicking on it and selecting "Group Policy Update." This will update not only the OU itself but also all sub-OUs.
As a bonus, this option will also display the number of computers in the OU, as well as all sub-OUs, which could be a useful and surprising feature!
After selecting "Yes" in the prompt, a window will appear displaying which computers have successfully applied a policy or failed to apply it.
3. As usual, there is also a PowerShell cmdlet available for this task.
Invoke-GPUpdate -Computer ComputerName -RandomDelayInMinutes 0 -Force
Alternatively, you can use a script to update Group Policy for the entire domain:
$Computers = Get-ADComputer -Filter *
$Computers | ForEach-Object -Process {Invoke-GPUpdate -Computer $_.name -RandomDelayInMinutes 0 -Force}
End!
