A desktop technician receives a helpdesk ticket stating that a Windows workstation is not reflecting newly assigned domain Group Policy Objects (GPOs). The technician needs to manually enforce policy updates using the command line, verify applied GPOs in the terminal, and output a detailed HTML report for compliance audit. In what order should the technician execute the steps below to complete this administrative workflow?
- 1Open an elevated Command Prompt instance using 'Run as administrator'.
- 2Execute 'gpupdate /force' to re-apply all user and computer Group Policy settings immediately.
- 3Execute 'gpresult /r' to display a summary of applied GPOs directly within the command prompt window.
- 4Execute 'gpresult /h gpreport.html' to generate a detailed HTML Resultant Set of Policy report for compliance audit documentation.
Answer
The technician must first open an elevated Command Prompt ('Run as administrator'), then execute 'gpupdate /force' to apply the updated policy settings, followed by 'gpresult /r' to inspect summary output in the console, and finally execute 'gpresult /h gpreport.html' to create the detailed HTML audit report.
The workflow begins with opening an elevated Command Prompt, as updating computer-level policies and extracting full RSoP details requires elevated administrative permissions. Next, 'gpupdate /force' must be run to pull down and re-apply all current GPOs from Active Directory. Once the refresh completes, 'gpresult /r' is executed to quickly verify in the command prompt console that the expected GPOs have taken effect. Finally, 'gpresult /h gpreport.html' exports the complete, verified RSoP report to an HTML document for official audit logging.
Step-by-Step Solution
Key Concept
Group Policy Command-Line Administration (gpupdate and gpresult)