Some notes about Group Policy

I’m not a Windows admin.  However managing a Windows network has become my responsibility.  These are some useful things I learned today.  Most notably that gpresult is an indispensable tool for debugging GPO problems.  The /scope option can be used to specify the scope as the computer level but you MUST choose “run as administator” to do it.  Even logging in as an admin won’t work.

WMI filters are an intriguing way to set criteria for your GPO.  I found some examples online that would allow me to select based on 32 vs 64 bit architectures.  I needed this because our AV installer has two different installers based on CPU architecture.

gpupdate /force is how you update a client policy w/o (necessarily) rebooting.

Advertisements
This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s