| Author | Messages | |
MartinDBaker
Posts:1
 | | 06/16/2009 9:23 PM |
| Question for you guys:
I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs,
which says that you need to run GPUPDATE /FORCE on a DC to push out GPO
changes to clients.
Is that correct? I thought it would update the DC itself & that you need to
run GPUPDATE from the client that needs the changed GPOs.......
Thanx
| | | |
| flowman
Posts:2
| | 06/16/2009 9:27 PM |
| No, it's not correct. You can't push Group policy to clients. Gpupdate
/force on a domain controller only updates the GP on the DC itself.
On Tue, Jun 16, 2009 at 10:21 PM, Martin Baker <xxxxxxxxxxxxxxxx>wrote:
> Question for you guys:
>
> I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs,
> which says that you need to run GPUPDATE /FORCE on a DC to push out GPO
> changes to clients.
>
>
>
> Is that correct? I thought it would update the DC itself & that you need to
> run GPUPDATE from the client that needs the changed GPOs.......
>
>
>
> Thanx
>
--
Otto Horvath
[MS MVP - Group Policy]
| | | |
| jlangerak
Posts:4
| | 06/16/2009 9:27 PM |
| [cid:imageb31145.jpg@a56a05fe.77ef4e9a]
I would say that you're right Martin. But I must say I've never actually taken a course from Microsoft for this...
Jake Langerak
Itium ICT
Keizersgracht 442
1016 GD AMSTERDAM
The Netherlands
xxxxxxxxxxxxxxxx
www.itiumict.com
T: +31 (0)20 - 620 81 99
F: +31 (0)20 - 623 06 79
M: +31 (0)6 - 41 178 057
[cid:image8b6f8f.png@c28132b7.2b79426b]
Voor supportverzoeken stuurt u een e-mail aan xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>.
Dit e-mailbericht en enige bijlage is uitsluitend bestemd voor de geadresseerde(n) en strikt vertrouwelijk of anderszins wettelijk beschermd. Indien u niet de beoogde ontvanger van dit bericht bent, verzoekt Itium ICT u dit bericht te verwijderen, eventuele bijlagen niet te openen en wijst Itium ICT u op de onrechtmatigheid van het gebruiken, kopi?ren of verspreiden van de inhoud van dit bericht.
Itium ICT is niet aansprakelijk voor virussen in dit e-mailbericht en/of enige bijlage. Itium ICT kan op geen enkele wijze verantwoordelijk of aansprakelijk worden gehouden voor en/of in verband met de gevolgen van en/of schade ontstaan door het onjuist, onvolledig en/of niet-tijdig versturen en ontvangen van de inhoud van dit bericht.
This e-mail message, including any attachment(s), is intended solely for the addressee or addressees and is strictly confidential or otherwise legally protected. If you are not the intended recipient, you are requested by Itium ICT to delete the message (with attachments) without opening it and you are notified by Itium ICT that any disclosure, copying or distribution of the information contained in the message (with attachments) is strictly prohibited and unlawful.
Itium ICT cannot assume any responsibility for the accuracy or reliability of the information contained in these message (including attachments), nor shall the information be construed as constituting any obligation on the part of Itium ICT.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Martin Baker
Sent: dinsdag 16 juni 2009 22:22
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] What does GPUPDATE /FORCE do on a 2008 DC?
Question for you guys:
I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs, which says that you need to run GPUPDATE /FORCE on a DC to push out GPO changes to clients.
Is that correct? I thought it would update the DC itself & that you need to run GPUPDATE from the client that needs the changed GPOs.......
Thanx
| | | |
| dmarelia
Posts:442
| | 06/16/2009 9:55 PM |
| You're correct Martin-
Not sure what the person who made that statement was smoking J, but GPUpdate
is strictly a "client"-based operation. There is no concept of pushing GP
Updates out to clients unless you do something like the SpecOps GPUpdate
tool, one of my command-line gp refresh tools or the GPO Touch utility I
wrote that essentially artificially updates a GPO's version such that the
client thinks something has changed and re-processes it-but that has to wait
for the client's normal GP Processing cycle.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Martin Baker
Sent: Tuesday, June 16, 2009 1:22 PM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] What does GPUPDATE /FORCE do on a 2008 DC?
Question for you guys:
I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs,
which says that you need to run GPUPDATE /FORCE on a DC to push out GPO
changes to clients.
Is that correct? I thought it would update the DC itself & that you need to
run GPUPDATE from the client that needs the changed GPOs.......
Thanx
| | | |
| Wornell1
Posts:21
| | 06/16/2009 10:01 PM |
| You can install a free tool from Specops Software named GPUpdate allows you to select an OU in Active Directory Users and Computers and force the policy update to all objects in the OU. Works great for this purpose
Kevin
Kevin Wornell
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of FlowMaN
Sent: Tuesday, June 16, 2009 3:26 PM
To: xxxxxxxxxxxxxxxx
Subject: Re: [gptalk] What does GPUPDATE /FORCE do on a 2008 DC?
No, it's not correct. You can't push Group policy to clients. Gpupdate /force on a domain controller only updates the GP on the DC itself.
On Tue, Jun 16, 2009 at 10:21 PM, Martin Baker <xxxxxxxxxxxxxxxx<mailto:xxxxxxxxxxxxxxxx>> wrote:
Question for you guys:
I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs, which says that you need to run GPUPDATE /FORCE on a DC to push out GPO changes to clients.
Is that correct? I thought it would update the DC itself & that you need to run GPUPDATE from the client that needs the changed GPOs.......
Thanx
--
Otto Horvath
[MS MVP - Group Policy]
Notice of Confidentiality
This transmission contains information that may be confidential. It has been prepared for the sole and exclusive use of the intended recipient and on the basis agreed with that person. If you are not the intended recipient of the message (or authorized to receive it for the intended recipient), you should notify us immediately; you should delete it from your system and may not disclose its contents to anyone else.
This e-mail has come to you from Watson Wyatt & Company.
| | | |
| flowman
Posts:2
| | 06/16/2009 10:35 PM |
| I found this Trainsignal video on my hard drive and I can confirm that the
instructor says, gpupdate /force updates the GP on the clients. I can't
imagine what other mistakes he made in this training, but not a good sign
that he is not aware of this basic concept.
http://www.trainsignaltraining.com/author/ben/
On Tue, Jun 16, 2009 at 10:53 PM, Darren Mar-Elia <xxxxxxxxxxxxxxxx>wrote:
> You’re correct Martin-
>
> Not sure what the person who made that statement was smoking J, but
> GPUpdate is strictly a “client”-based operation. There is no concept of
> pushing GP Updates out to clients unless you do something like the SpecOps
> GPUpdate tool, one of my command-line gp refresh tools or the GPO Touch
> utility I wrote that essentially artificially updates a GPO’s version such
> that the client thinks something has changed and re-processes it—but that
> has to wait for the client’s normal GP Processing cycle.
>
>
>
> Darren
>
>
>
> *From:* xxxxxxxxxxxxxxxx [mailto:
> xxxxxxxxxxxxxxxx] *On Behalf Of *Martin Baker
> *Sent:* Tuesday, June 16, 2009 1:22 PM
> *To:* xxxxxxxxxxxxxxxx
> *Subject:* [gptalk] What does GPUPDATE /FORCE do on a 2008 DC?
>
>
>
> Question for you guys:
>
> I've just been watching TrainSignal's WS2008 AD course - video 8 on GPOs,
> which says that you need to run GPUPDATE /FORCE on a DC to push out GPO
> changes to clients.
>
>
>
> Is that correct? I thought it would update the DC itself & that you need to
> run GPUPDATE from the client that needs the changed GPOs.......
>
>
>
> Thanx
>
--
Otto Horvath
[MS MVP - Group Policy]
| | | |
|
|