GpUpdate Who Knew?

[mrstrong]

... You can run "group policy results" to show expected outcome and "group policy modeling" to show actual results ...

 

Never used "modelling", I thought policy results gave you the actual settings currently applied on a client ?

[Owen2000]

Awesome

[penfold]

Never used "modelling", I thought policy results gave you the actual settings currently applied on a client ?

 

In addition to this, I'm trying to check some machines which we think have multiple GPO applied and I would like to get actual settings being applied. Is there a way to script this to output to a file for (ideally csv for comparison)?

[jedwards2]

I generally do gpupdates of client computers via a batch file, which I have a shortcut to on my desktop. Essentially the batch file runs the following command (having asked for the computer name), but it also checks the PC is available and offers relevant follow-up options too. We don't see a command prompt window with this on our network.

psexec \\%RemotePCName% %systemroot%\system32\gpupdate.exe /force

[DJ-1701]

I generally do gpupdates of client computers via a batch file, which I have a shortcut to on my desktop. Essentially the batch file runs the following command (having asked for the computer name), but it also checks the PC is available and offers relevant follow-up options too. We don't see a command prompt window with this on our network.

 

In case anyone doesn't know this PSExec can be found here. https://docs.microsoft.com/en-us/sysinternals/downloads/psexec

[jedwards2]

In case anyone doesn't know this PSExec can be found here. https://docs.microsoft.com/en-us/sysinternals/downloads/psexec

 

If anyone isn't familiar with that set of tools, it is worth a look to see what else is there - lots of things that are useful for automation and/or time-saving.

 

I don't mind sharing the batch file I mentioned above, but this one isn't overly long/complex.

[ozydave]

Blimey, never seen this before.

Cheers