Remote Group Policy updates are visible to users

Remote Group Policy updates are visible to users

In Windows 2012 R2 we have a very nice feature in the Group policy Management Console were we are able to run GPUpdate on all computers in a OU.

image

image

image

On a OU holding for example RDS or Citrix servers this is very useful.

But there is just one problem, users will see a popup like this on their screen.

image

If we try to update a single computer using powershell from remote wee will se the same popup behavior.

Example:

Invoke-GPUpdate -computer xenapptest -force -randomdelayinminutes 0

image

The problem and solution is explained here http://support.microsoft.com/kb/2741537

We must update only the computer Policy using PowerShell and not the User part of the policy, and this is often exactly what we need.

Invoke-GPUpdate -computer xenapptest -force -target computer -randomdelayinminutes 0

image

And no update is shown by using this command.

You can check the GroupPolicy log on the Computer running the GPUpdate to see if its actually is taken place:

image

Table of Contents

Share this post
Search blog posts
Authors
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.

Passionate IT professional with 20+ experience in IT architecture, consulting, and design. 

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

M.Sc Cybersecurity student specializing in Microsoft Sentinel Solutions

M.Sc Cybersecurity student specializing in Microsoft Sentinel Solutions

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly
Categories

Follow on SoMe