Question

You have just made changes to a GPO that you want to take effect as soon as possible on several user and computer accounts in the Sales OU. Most of the users in this OU are currently signed in to their computers. There are about 50 accounts.

What's the best way to update these accounts with the new policies as soon as possible?

a. Configure a script preference that runs gpupdate the next time the user signs out.
b. Configure the GPO to perform foreground processing immediately.
c. Run the Get-ADComputer and Invoke-GPUpdate PowerShell cmdlets.
d. Use the gpupdate /target:Sales /force command.

Answer 1

c. Run the Get-ADComputer and Invoke-GPUpdate PowerShell cmdlets.

Step-by-step explanation:

• Get-ADComputer will perform a search to retrieve information of all the accounts signed in.
• Invoke-GPUpdate will refresh assigned policies by running this command on the remote computers.
• Hence using these two commands you can easily update policies on all 50 accounts.