Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
An organizational unit (OU) named OU1 contains 200 client computers that run Windows 8
Enterprise. A Group Policy object (GPO) named GPO1 is linked to OU1.
You make a change to GPO1.
You need to force all of the computers in OU1 to refresh their Group Policy settings immediately.
The solution must minimize administrative effort.
Which tool should you use?

A.
The Secedit command

B.
The Invoke-GpUpdate cmdlet

C.
Group Policy Object Editor

D.
Server Manager

Explanation:

Invoke-GPUpdate
Schedule a remote Group Policy refresh (gpupdate) on the specified computer.
Applies To: Windows Server 2012 R2
The Invoke-GPUpdate cmdlet refreshes Group Policy settings, including security settings that are set
on remote computers by scheduling the running of the Gpupdate command on a remote computer.
You can combine this cmdlet in a scripted fashion to schedule the Gpupdate command on a group of
computers.
The refresh can be scheduled to immediately start a refresh of policy settings or wait for a specified
period of time, up to a maximum of 31 days. To avoid putting a load on the network, the refresh
times will be offset by a random delay.
Note:
Group Policy is a complicated infrastructure that enables you to apply policy settings to remotely
configure a computer and user experience within a domain. When the Resultant Set of Policy
settings does not conform to your expectations, a best practice is to first verify that the computer or
user has received the latest policy settings. In previous versions of Windows, this was accomplished
by having the user run GPUpdate.exe on their computer.
With Windows Server 2012 R2 and Windows 8, you can remotely refresh Group Policy settings for all
computers in an organizational unit (OU) from one central location by using the Group Policy
Management Console (GPMC). Or you can use the Invoke-GPUpdate Windows PowerShell cmdlet to
refresh Group Policy for a set of computers, including computers that are not within the OU
structure—for example, if the computers are located in the default computers container.
The remote Group Policy refresh updates all Group Policy settings, including security settings that
are set on a group of remote computers, by using the functionality that is added to the context
menu for an OU in the Group Policy Management Console (GPMC). When you select an OU to
remotely refresh the Group Policy settings on all the computers in that OU, the following operations
happen:
An Active Directory query returns a list of all computers that belong to that OU.
For each computer that belongs to the selected OU, a WMI call retrieves the list of signed in users.
A remote scheduled task is created to run GPUpdate.exe /force for each signed in user and once for
the computer Group Policy refresh. The task is scheduled to run with a random delay of up to 10
minutes to decrease the load on the network traffic. This random delay cannot be configured when
you use the GPMC, but you can configure the random delay for the scheduled task or set the
scheduled task to run immediately when you use the Invoke-GPUpdate cmdlet.

Force a Remote Group Policy Refresh (GPUpdate)