Change group policy using windows CMD. what is the correct command line ?

Hi,

Use these tools on CMD to manage and play with GP:

- gpedit.msc : to access the local group policy

- gpmc.msc : to access the domain group policy, installed by default on DC

- gpupdate : to update, refresh and apply the new group policy settings

-gpresult : to view the apploied GPOs and some settings.

Noe that there ares some other commands can be used on powershell for managing and dministering GP.

HTH

Best Regards,

To access directly into Group Policy Editor with only one CMD command :

gpedit.msc

 To refresh local and Active Directory-based Group Policy settings, including security settings :

gpupdate /force

GPMC If you know anything about Group Policy, you probably know that GPMC is used to manage Active Directory-based Group Policy. GPMC provides a comprehensive set of Component Object Model (COM) interfaces that you can use to script many operations. 

GPFIXUP This is used to resolve domain name dependencies in Group Policy objects and Group Policy links after a domain rename operation. 

GPRESULT You can use this tool to see what policy is in effect and to troubleshoot policy problems. 

GPUPDATE This lets you refresh Group Policy manually. Gpupdate replaces the SECEDIT /refreshpolicy tool that was available in Windows2000. If you type gpupdate at a command prompt, both the Computer Configuration settings and the User Configuration settings in Group Policy will be refreshed on the local computer. 

LDIFDE This tool is used to import and export directory information. You can use LDIFDE to help you perform advanced backup and recovery of policy settings that are stored outside of GPOs. Specifically, you can use this tool to back up and restore a large number of Windows Management Instrumentation (WMI) filters at one time. 

Nice question. Please see the answer

The local Group Policy object on ThisComputerName

gpedit.msc /gpcomputer:" ThisComputerName "

The local Group Policy object on ThisComputerName(specified in the DNS style)

gpedit.msc /gpcomputer:" ThisComputerName.domain.com "

Group Policy objects stored in Active Directory

gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=WingTipToys,DC=com"

Note

• The GUID for the Group Policy object above is a fictitious example. 

When we do some changes in group polices we use "gpupdate" CMD to update group policy

You can use powershell scripts on startup