Question

Difficulty: MediumMicrosoft Command-Line Tools

A systems administrator recently modified a security Group Policy Object (GPO) in Active Directory. To test the changes on a targeted Windows 11 client computer immediately, the administrator needs to trigger a refresh of both computer and user policies without restarting the device or requiring the user to sign out. Which command-line tool and option should the administrator execute from an elevated command prompt?

  1. gpupdate /forceAnswer
  2. B
    gpresult /r
  3. C
    secpol.msc /refresh
  4. D
    systemctl reload gpo

Answer

The command gpupdate /force is the correct utility to instantly reapply all user and computer Group Policy settings.
Executing gpupdate /force from an elevated command prompt forces an immediate update of all active Group Policy settings (both computer and user policies), ignoring any default background refresh intervals.

Step-by-Step Solution

1
Identify the goal
Immediate refresh of Group Policy settings on a Windows workstation.
The scenario specifies updating policies immediately without rebooting or forcing user sign-out.
2
Evaluate Windows Command-Line tools for Group Policy management
gpupdate is used to update policy settings, while the /force flag causes all policies to be reapplied regardless of whether they have changed.
By default, Windows periodically refreshes policy in the background, but /force overrides the timer and reapplies settings instantly.

Key Concept

Windows Group Policy Command-Line Administration
Rate this question