Some notes about Group Policy

I’m not a Windows admin.  However managing a Windows network has become my responsibility.  These are some useful things I learned today.  Most notably that gpresult is an indispensable tool for debugging GPO problems.  The /scope option can be used to specify the scope as the computer level but you MUST choose “run as administator” to do it.  Even logging in as an admin won’t work.

WMI filters are an intriguing way to set criteria for your GPO.  I found some examples online that would allow me to select based on 32 vs 64 bit architectures.  I needed this because our AV installer has two different installers based on CPU architecture.

gpupdate /force is how you update a client policy w/o (necessarily) rebooting.

This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s