A systems administrator is maintaining a fleet of Windows workstations and recently updated several security Group Policy Objects (GPOs). The administrator needs to force an immediate reapplication of all computer and user policy settings on a target workstation without restarting the computer or logging off the active user. Additionally, the administrator wants to display a summary report of the currently applied GPOs directly within the Command Prompt window. Which TWO command-line actions should the administrator perform to accomplish these tasks? (Select TWO.)
- Run `gpupdate /force` to immediately reapply all default and modified Group Policy settings.Answer
- Run `gpresult /r` to display a summary of Resultant Set of Policy (RSoP) data and applied GPOs.Answer
- CRun `gpupdate /boot` to schedule an immediate background policy refresh.
- DOpen `secpol.msc` from the command line to display the active GPO summary report.
Answer
To complete both tasks, the administrator should execute `gpupdate /force` to force an immediate refresh of all computer and user policy settings without rebooting, and execute `gpresult /r` to display a text summary of the applied Group Policy objects and RSoP data directly in the terminal.
The command `gpupdate /force` is used to trigger an immediate update of all local and domain-based Group Policy settings without requiring the user to log off or reboot the system. The command `gpresult /r` generates a text-based summary of the Resultant Set of Policy (RSoP) data directly within the Command Prompt window, showing applied GPOs and security settings for both user and computer scopes.
Step-by-Step Solution
Key Concept
Group Policy Command-Line Management (gpupdate and gpresult)