Group Policy Update Across all Windows Systems

Usage and Config
1

(imported topic written by SmearODeer91)

I Created a Task that…

Forces a Group Policy Update on Microsoft Windows Operating Systems

XP, Vista, 2003,2008 run: GPUPDATE /FORCE

Windows 2000 server and Workstation run: SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE

And I Used this relevance to Restict to Windows Boxes. I Don’t really know if I have to look at language but I Do… Looking to Clean this up more if anyone has a suggestion.

((name of operating system as lowercase starts with “win”) AND ((language of version block of file “kernel32.dll” of system folder contains “English”) OR (exists value of key “HKLM\System\CurrentControlSet\Control\Nls\MUILanguages” of registry))) AND ((name of it = “Win2000” OR name of it = “WinXP” OR name of it = “Win2003” OR name of it = “WinVista” OR name of it = “Win2008”) of operating system)

And Last but not least my BigFix Action Script…I Also set it as the defualt Action.

//Force Policy Update

waithidden {if (name of operating system = “Win2000”) then (“SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE”) else (“GPUPDATE /FORCE”) }

Comment on how to improve or just a plain better way or if you found useful.

2

(imported comment written by kaushalw91)

You have a GUI task. Just mention the command dos " gpupdate /force" or dos " secedit /refresh_policy /user_policy"

in the action. In the relevance tab click the box and enter the parameters.

Thanks,

Kaushal

3

(imported comment written by SmearODeer91)

Well I Updated to End up With this so it works in the Background with no Hangs.

“Windows Security: Group Policy Update for Windows 2000, 2003, 2008, XP and Vista.”

//Force Policy Update

waithidden {if (name of operating system = “Win2000”) then (“SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE”) else (“GPUPDATE /FORCE /WAIT:600”) }

I Decide on this as I did not want my Console operators to have to think or type. Just a quick right click and Depoy Defualt.