Click here to get back home

Domain refresh of GPO
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Domain refresh of GPO Jay 02-13-2007
Posted by Jay on February 13, 2007, 2:53 pm
Please log in for more thread options
 Is there a way to do a domain refresh the GPO?

I am in the process of hardening a windows domain. I have setup a
test domain and while I am testing I use ">gpupdate /force" to refresh
the policies on each server. However, it is painful as I have to
login to each server individually to execute gpupdate. Is there a
shorter way of doing this? I have thought of writing a script but I
would assume that there is some functionality that would do this. If
scripting is the only way does anyone have a sample script that I
could use as a starting point.

Thank you in advance
J


Posted by Hugo on February 13, 2007, 3:06 pm
Please log in for more thread options
 In a GPO, under Computer Settings-Administrative Template-System-Group
Policy, you all you need to configure the GPO refresh interval !

Hugo

1171396411.458376.181870@a75g2000cwd.googlegroups.com...
> Is there a way to do a domain refresh the GPO?
>
> I am in the process of hardening a windows domain. I have setup a
> test domain and while I am testing I use ">gpupdate /force" to refresh
> the policies on each server. However, it is painful as I have to
> login to each server individually to execute gpupdate. Is there a
> shorter way of doing this? I have thought of writing a script but I
> would assume that there is some functionality that would do this. If
> scripting is the only way does anyone have a sample script that I
> could use as a starting point.
>
> Thank you in advance
> J
>



Posted by Darren Mar-Elia on February 13, 2007, 7:13 pm
Please log in for more thread options
I just blogged about this today in fact!
http://blogs.dirteam.com/blogs/gpoguy/archive/2007/02/13/good-article-on-remote-gp-updates.aspx





--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at
http://www.sdmsoftware.com/products.php


> In a GPO, under Computer Settings-Administrative Template-System-Group
> Policy, you all you need to configure the GPO refresh interval !
>
> Hugo
>
> 1171396411.458376.181870@a75g2000cwd.googlegroups.com...
>> Is there a way to do a domain refresh the GPO?
>>
>> I am in the process of hardening a windows domain. I have setup a
>> test domain and while I am testing I use ">gpupdate /force" to refresh
>> the policies on each server. However, it is painful as I have to
>> login to each server individually to execute gpupdate. Is there a
>> shorter way of doing this? I have thought of writing a script but I
>> would assume that there is some functionality that would do this. If
>> scripting is the only way does anyone have a sample script that I
>> could use as a starting point.
>>
>> Thank you in advance
>> J
>>
>
>


Posted by Jay on February 14, 2007, 10:54 am
Please log in for more thread options
Thanks so much Darren, exactly what I was looking for!


Darren Mar-Elia wrote:
> I just blogged about this today in fact!
> http://blogs.dirteam.com/blogs/gpoguy/archive/2007/02/13/good-article-on-=
remote-gp-updates.aspx
>
>
>
>
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Server--Group Policy
> http://www.gpoguy.com -- The Windows Group Policy Information Hub:
> FAQs, Training Videos, Whitepapers and Utilities for all things Group
> Policy-related
>
> Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at
> http://www.sdmsoftware.com/products.php
>
>
> > In a GPO, under Computer Settings-Administrative Template-System-Group
> > Policy, you all you need to configure the GPO refresh interval !
> >
> > Hugo
> >
> > 1171396411.458376.181870@a75g2000cwd.googlegroups.com...
> >> Is there a way to do a domain refresh the GPO?
> >>
> >> I am in the process of hardening a windows domain. I have setup a
> >> test domain and while I am testing I use ">gpupdate /force" to refresh
> >> the policies on each server. However, it is painful as I have to
> >> login to each server individually to execute gpupdate. Is there a
> >> shorter way of doing this? I have thought of writing a script but I
> >> would assume that there is some functionality that would do this. If
> >> scripting is the only way does anyone have a sample script that I
> >> could use as a starting point.
> >>
> >> Thank you in advance
> >> J
> >>
> >
> >


Posted by Herb Martin on February 13, 2007, 7:34 pm
Please log in for more thread options

> Is there a way to do a domain refresh the GPO?

There is nothing built-in to do that. But you can run GPUpdate from
each machine so you can use (the free) PSExec from SysInternals to
fire GPUpdate on each XP+ (or or SecEdit on Win2000) machine.

> I am in the process of hardening a windows domain. I have setup a
> test domain and while I am testing I use ">gpupdate /force" to refresh
> the policies on each server. However, it is painful as I have to
> login to each server individually to execute gpupdate. Is there a
> shorter way of doing this? I have thought of writing a script but I
> would assume that there is some functionality that would do this. If
> scripting is the only way does anyone have a sample script that I
> could use as a starting point.
>
> Thank you in advance
> J


--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)



Similar ThreadsPosted
SID/DACL refresh April 12, 2006, 11:12 am
Fastest way to refresh security and share permission July 4, 2006, 7:53 pm
Allowing a Domain User Admin Rights to a Couple of Domain Servers June 29, 2005, 8:13 pm
Windows 2003 - Child domain cannot request certificate from root domain January 11, 2008, 11:41 am
Adding another domain users to your local domain admin group December 28, 2005, 12:19 pm
domain access control for local user of domain computer? April 3, 2008, 5:14 pm
Cannot manage Entreprise CA that is in parent domain from child domain May 7, 2008, 4:03 am
ENTERPRISE DOMAIN CONTROLLERS Vs Domain Group Domain Controllers December 30, 2005, 3:08 am
Adding a User from One Domain to a Group in Another Domain August 18, 2006, 12:12 am
Domain authenticating non-domain accounts February 22, 2008, 9:14 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap