• subscribe
February 16, 2011 01:00 PM

Q: How can I enforce the application of machine Group Policy Object (GPO) settings on a Windows client? Are there any differences here between Windows 2000 and Windows Server 2008?

Windows IT Pro
InstantDoc ID #129591

A: On a computer running Windows 7, Windows Server 2008 (and R2), Windows Vista, Windows Server 2003, or Windows XP, you can enforce the application of machine GPO settings by typing the following command (make sure that you're doing this in the security context of an administrator account and that you replace <computer_name> with the correct machine name):

gpupdate /target:<computer_name> /force

On a computer running Windows 2000, you must use the following secedit command to achieve the same thing:

secedit /refreshpolicy machine_policy


ARTICLE TOOLS

Comments
  • Mar-Elia
    1 year ago
    Feb 23, 2011

    The syntax above for gpupdate is incorrect. It implies you can use it to refresh a remote system, but you cannot. The /target parameter takes either "computer" or "user" to tell the command that you want to update that "side" of GPO on the local machine.

  • Mar-Elia
    1 year ago
    Feb 23, 2011

    The syntax above for gpupdate is incorrect. It implies you can use it to refresh a remote system, but you cannot. The /target parameter takes either "computer" or "user" to tell the command that you want to update that "side" of GPO on the local machine.

You must log on before posting a comment.

Are you a new visitor? Register Here