Cmd Gpupdate

The gpupdate command refreshes a computer”s local Group Policy, and any Active Directory-based group policies.

When the time limit is exceeded, the command prompt returns, but policy processing continues. /Logoff Causes a logoff after the Group Policy settings have been refreshed. This is required for those Group Policy client-side extensions that do not process policy on a background refresh cycle but do process policy when a user logs on.

The GPUpdate command is used to force the update of the computer and/or user group policy settings. For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.-When I execute gpresult /h gpresult.html, and confirm the result, there are 3 errors listed as below.


Gpupdate is an external command and is available for the following Microsoft operating systems as gpupdate.exe.

Gpupdate syntax


/Target:{Computer | User} Specifies that only user or only computer policy settings be refreshed. By default, both user and computer policy settings are refreshed.
/Force Reapplies all policy settings. By default, only policy settings that have changed are applied.
/Wait:{value} Sets the number of seconds to wait for policy processing to finish. The default is 600 seconds. The value “0” means not to wait. The value “-1” means to wait indefinitely. When the time limit is exceeded, the command prompt returns, but policy processing continues.
/Logoff Causes a logoff after the Group Policy settings are refreshed, which is required for those client-side extensions that don”t process policy on a background refresh cycle but do during log on. Examples include user-targeted Software Installation and Folder Redirection. This option has no effect if there are no extensions called that require a logoff.
/Boot Causes a reboot after the Group Policy settings are refreshed, for those client-side extensions that don”t process policy on a background refresh cycle but do at startup. Examples include computer-targeted Software Installation. This option has no effect if there are no extensions called that require a reboot.
/Sync Causes the next foreground policy application to be done synchronously. Foreground policy applications occur at computer boot and user login. You can specify this for the user, computer or both using the /Target parameter. The /Force and /Wait parameters are ignored if specified.

Gpupdate examples

Running the command alone refreshes the computers policies as shown below in the example output.

Additional information

  • See our Active Directory definition for further information and related links on this term.

Today I will show you how to force a group policy update on remote computers.

Computers will update group policy in the background every 90 minutes, in addition, group policy is updated when the computer starts up.

There are times when you make changes or create new GPOs (Group Policy Objects) and you need the changes to go into effect immediately.

There are a few different methods for remotely updating group policy.

Let’s take a look.

Tip: Method 1 is best for older clients, Method 2 and 3 are for systems running 2012 and later.

Force gpupdate via powershell windows 10

Method 1: Using the gpupdate command with PsExec

This first method uses a built in command on the client computers called gpupdate.

To immediately force a group policy update on the local computer use this command

Cmd Gpupdate

Now, if you have a bunch of computers that need updated it would be a pain to log into each one and run this command.

To run this on a remote computer you can use the PsExec command from the Sysinternals toolset.

Here is an example of using PsExec to remotely update group policy

Just replace Computername with the actual hostname of the computer.

Method 2: Using Group Policy Management Console

With Windows Server 2012 and later versions, you can now force a group policy update on remote computers from the Group Policy Management Console.

This method is super easy and allows you to run an update on a single OU or all OUs.

Here are the steps

Step 1: Open the Group Policy Management Console

You can open this console on a computer that has the RSAT tools installed or a server running the DHCP role.

Step 2: Right click an OU to update

You can update an individual OU or a parent OU and it will update all sub OUs.

I’m going to update my parent OU “ADPRO Computers” this OU has a few sub OUs broken out into departments. This will run a group policy update on all computers.

I’ll click yes to confirm to run the update.

Now this is pretty cool, I get a window showing me the status of group policy being updated on each computer.

There you have it, that’s how easy it is to use the group policy management console to remotely force a group policy update.

If you are a Powershell nerd then check out the next method.

Related: GPResult Tool: How To Check What Group Policy Objects are Applied

Method 3: Using Powershell Invoke-GPUpdate

In Windows 2012 you can now force an immediate update using the powershell invoke-GPUupdate cmdlet.

This command can be used to update Windows 10 and Windows 7 clients.

Download meet the spartans in hindi 720p

You will need Powershell installed as well as the Group Policy Management Console (GPMC).

Here is the command:

The RandomDelayInMinutes 0 specifies the delay. Setting it to 0 will update group policy right away.

Gpupdate In Powershell

The only downside to using this command is that the clients will get a CMD screen pop up like below.

It only displays for about 3 seconds then closes.

Group Policy Windows Update 10

If you want to use the PowerShell command to force an update on all computers you can use these commands:

The above commands will pull in every computer from the domain, put them into a variable and run the commands for each object in the variable.

Cmd Gpupdate Force

As always I hope you find this article useful.

Recommended Tool: SolarWinds Server & Application Monitor

Force Gpupdate Via Powershell Windows 10

This utility was designed to Monitor Active Directory and other critical services like DNS & DHCP. It will quickly spot domain controller issues, prevent replication failures, track failed logon attempts and much more.

Cmd Gpupdate Windows 10

What I like best about SAM is it’s easy to use dashboard and alerting features. It also has the ability to monitor virtual machines and storage.