It has been a while since I worked with Windows GPO’s and I had recently had to refresh my memory while helping a customer deploy a Windows Server Update Services (WSUS). The commands that I always find myself needing yet always forgetting are listed below.
Command Switch I Always Forget
gpupdate /force
gpresult Pretty much does what I want w/o any switches
secedit /REFRESHPOLICY MACHINE_POLICY /ENFORCE
secedit /REFRESHPOLICY USER_POLICY /ENFORCE
These commands are helpful in determining which GPO’s are getting applied to a particular server or workstation. It’s one thing to trust what you see modeled in the GPMC, but it’s another to see the actual results be implemented on a machine…..these commands help with that.