How do I use the gpupdate PowerShell command?

What is the gpupdate command?

The gpupdate command is a Windows PowerShell command that enables administrators to refresh or apply Group Policy settings instantly. Group Policy Objects (GPOs) are a collection of policy settings that are applied to manage the system settings of users and computers in an Active Directory setup. By default, Windows updates Group Policy settings every 90 minutes or when a computer reboots. However, there may be instances when an IT administrator needs to apply updated policies instantly without waiting for the next refresh cycle. In such situations, the gpupdate command is used to enforce a policy update and it takes into account only the changes in the existing Group Policies or new Group Policies.

How does the gpupdate command work?

The gpupdate command when executed forces a manual policy refresh. Here is how it functions:

• Policy update request: Executing the gpupdate command sends a request to the domain controller to check for new Group Policy settings or changes.
• Policy processing: The updated polices are processed in accordance with the GPO policy processing order.
• Policy application: The system then applies the changes made to the user and computer configurations.
• System restart: If required, the gpupdate command will inform you that a system restart is necessary. If you run the /force option, it can forcefully apply the policies regardless of whether they have been changed or not.

Prerequisites for using the gpupdate command

• The computer you are using must be joined to an Active Directory domain.
• At least one Group Policy must be assigned to the computer you are using.

How do I update group policies using native AD tools?

Using PowerShell:

• Open Command Prompt or PowerShell as an administrator.
• Execute the gpupdate command along with the desired parameter to get the output.

The following is an example of how the gpupdate command be used to force update both user and computer configurations:

Using Group Policy Management Console (GPMC)

• Open GPMC. Press Win + R, type gpmc.msc, then press Enter or search for Group Policy Management in the Start menu and open it.
• Locate the OU containing the desired computers and users that you would like to update.
• Right click on the OU and select Group Policy Update.

The GPMC uses the gpupdate /force command remotely to update policies on all computers and users within the OU. However, you should only use the /force option for troubleshooting or when there is an issue applying a policy; since gpupdate /force runs on multiple computers at the same time, it puts a major load on the domain controllers and takes longer for the update to happen.

Supported parameters

The following table contains the parameters that can be used along with the gpupdate command.

How to force update Group Policy using ADManager Plus

Generally, forcing a Group Policy update involves complex PowerShell scripting or using the gpupdate command. ADManager Plus streamlines this process by offering a user-friendly force GPO update option. This feature allows administrators to apply policy changes immediately, bypassing the default 90-minute update cycle. Here's how you can force update GPOs using ADManager Plus:

• Log in to ADManager Plus.
• Navigate to Management > GPO Management > Force GPO Update.
• Choose the required domain from the Select Domain drop-down.
• The Force GPO Update page will display all the domain computers linked to the selected domain. From the list, select the specific domain computers you need.
• Use the Import CSV option to import the Domain Computers list.
• Click Apply to force GPO updates.

How ManageEngine ADManager Plus can help with GPO management

ADManager Plus is an integrated AD management and reporting solution with GPO management and reporting capabilities. You can simplify GPO management by configuring GPOs in bulk and monitor compliance with access to an audit trail of all GPO changes via reports.

Here are some of the supported GPO capabilities in ADManager Plus. You can:

Try ADManager Plus Now

Here are some of the supported GPO capabilities in ADManager Plus. You can:

• Create GPOs and instantly link them.
• Edit GPOs and their user and computer settings.
• Manage GPOs by enabling, disabling or deleting them.
• Manage GPO links by enabling, disabling, or removing them.
• Enforce GPOs and block or unblock inheritance of GPO links.
• Generate GPO reports on GPO status, settings, scope, and more.
• Migrate GPOs across forests in a domain.
• Gain insights on frequently modified GPOs, recently created GPOs, and more.