Okay.
So let's do a quick demo of how these various group policy updating tools work.
The first thing I'm going to do is use update and I can get the syntax by using a slash question mark.
And what you see here are a set of options that I talked about earlier.
Everything from targeting either the computer or the user to forcing group policy processing to telling
it to wait a certain essentially offset before it actually issues the group policy processing to log
off or boot.
These are options which essentially serve those synchronous client side extensions I mentioned, like
software installation and folder redirection because those policy processing cycles don't run unless
a synchronous foreground cycle occurs, which is on a computer.
It's a reboot.
And on a user, it's a log off.
Log back on what log off and boot do respectively is set that synchronous flag and forced the user to
log off or for the computer.
The boot option sets the synchronous flag and forces the computer to restart.
So you have to be sort of careful when you use those options for obvious reasons.
The sink option.
Actually, all it does is set the flag.
So it says go ahead and set the flag for computer user or both to be synchronous during the next foreground
processing cycle.
So if that flag is set and that machine is rebooted, then that computer processing cycle that when
it comes back up will be running synchronously.
This is kind of a way of forcing synchronous on the next foreground cycle.
So, you know, it's easy enough to use the command.
You can just type update force and it runs both user and computer policy processing by default and it
tells you when it's succeeded or if it fails, it will tell you that as well.
So let me shift gears and show you the PMC way of doing this.
Now again, this is a feature in server 2012, 2012 or two and Windows eight X.
And what it allows you to do is pick up, oh, you, you can't do it at the domain level, but you can
do it at the EU level.
So it allows me to pick an oh you right click it and say group policy update.
It goes out and looks at all of the computer objects that are in either that direct oyu or any sublease
underneath it.
And it in this case it found one computer.
And what it'll do then is if I say yes here, it will go out and do a GP update force equivalent to
all of the clients that it found.
And you can see here that it found my Win7 client and succeeded to deliver that update.
If there were errors, it would show lists of those computers that error it out and the error description
in case that was relevant.
And that is really all there is to it.
As long as you have sufficient rights access over WMI and permissions to do a GP update remotely, you're
good to go.