Your network contains an Active Directory domain named contoso.com. All domain
controllers run Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8
Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings
immediately. The solution must minimize administrative effort.
Which tool should you use?
A.
TheSecedit command
B.
The Invoke-GpUpdatecmdlet
C.
Group Policy Object Editor
D.
Server Manager
Not sure I agree with the answer – Invoke-GPUpdate would run GPUpdate on a specified machine.
In Group Policy Management you can right click an OU and click Group Policy Update and it will run GPUpdate on all machines/users in an OU.
However the answer above says Group Policy Object Editor….which is neither!!!
0
0
Answer is C:
Group Policy Object editor
https://technet.microsoft.com/en-us/library/dn265973.aspx#BKMK_GPUP
Prior to Windows Server 2012, you would have to remote to a specific computer and run gpupdate.exe from the command-line. In Windows Server 2012 you can update Group Policy for all computers in a specific OU and the OUs that it contains. For more information about the new remote Group Policy update feature, see Force a Remote Group Policy Refresh (GPUpdate)
0
0
this article talk about Group Policy Management Console (GPMC) but no to GPOE.
B is the correct response
0
0
B.
Two way to do it 🙂
Invoke-GPUpdate and GPMC.MSC
0
0
B. Invoke-GPUpdate
immediately is a requirement,
from MS: https://technet.microsoft.com/en-us/library/hh967455(v=wps.630).aspx
The refresh can be scheduled to immediately start a refresh of policy settings or wait for a specified period of time, up to a maximum of 31 days. To avoid putting a load on the network, the refresh times will be offset by a random delay.
0
0
B. Invoke-GPUpdate
You can force an immediate Group Policy refresh for all Group Policy settings for all computers in a single OU when you combine the Get-ADComputer with the Invoke-GPUpdate cmdlet and set the –-RandomDelayInMinutes to 0. For example, to force a refresh of all Group Policy settings for all computers in the Accounting OU of the Contoso.com domain, use the following script:
Get-ADComputer –filter * -Searchbase “ou=Accounting, dc=Contoso,dc=com” | foreach{ Invoke-GPUpdate –computer $_.name –force –-RandomDelayInMinutes 0}
0
0