Force a Domain-Wide Update of Group Policy

If you needed to force a Group Policy Update to large number of computers, to ensure that they pick up the new policy that you have just rolled out. You can do this easily using psexec utility from Windows Sysinternals.

PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software.

How to Force a Domain-Wide Update of Group Policy

1. On your Domain controllers create a new folder on your C drive and name it pstools (C:\pstools)

2. Download a copy of PSTOOLS and save it to C:\pstools folder

3. In C:\pstools folder create a file with the name FORCE_DOMAIN_WIDE_UPDATE with .bat extension (FORCE_DOMAIN_WIDE_UPDATE.bat)

4. Right click on FORCE_DOMAIN_WIDE_UPDATE.bat file then click edit and insert the following code and save the file make sure it is saved in C:\pstools.

cmd /k "psexec \\* gpupdate /force"
The psexec tool will live query Active Directory and attempt to force a Group Policy refresh on all machines. It’s also smart enough to know if the machine is offline and move onto the next one.

5. Navigate to C:\pstools folder, right click on FORCE_DOMAIN_WIDE_UPDATE.bat file and select run as administrator this will start our .bat script.


6. Leave the script running till it cycles through all of your computers on the domain. Please note this can take some time to finish, leave your client computers switched on and leave your script running over night.