I’m not a Windows admin. However managing a Windows network has become my responsibility. These are some useful things I learned today. Most notably that gpresult is an indispensable tool for debugging GPO problems. The /scope option can be used to specify the scope as the computer level but you MUST choose “run as administator” to do it. Even logging in as an admin won’t work.
WMI filters are an intriguing way to set criteria for your GPO. I found some examples online that would allow me to select based on 32 vs 64 bit architectures. I needed this because our AV installer has two different installers based on CPU architecture.
gpupdate /force is how you update a client policy w/o (necessarily) rebooting.