Communiquez avec les autres et partagez vos connaissances professionnelles

Inscrivez-vous ou connectez-vous pour rejoindre votre communauté professionnelle.

Suivre

Change group policy using windows CMD. what is the correct command line ?

user-image
Question ajoutée par Utilisateur supprimé
Date de publication: 2014/07/04
Anas Jalal Yahya
par Anas Jalal Yahya , Service Delivery Manager - Project Manager , Diyar Middle East

Hi,

 

Use these tools on CMD to manage and play with GP:

- gpedit.msc : to access the local group policy

- gpmc.msc : to access the domain group policy, installed by default on DC

- gpupdate : to update, refresh and apply the new group policy settings

-gpresult : to view the apploied GPOs and some settings.

 

Noe that there ares some other commands can be used on powershell for managing and dministering GP.

 

HTH

Best Regards,

 

 

Utilisateur supprimé
par Utilisateur supprimé

To access directly into Group Policy Editor with only one CMD command :

gpedit.msc

 To refresh local and Active Directory-based Group Policy settings, including security settings :

 

gpupdate /force

Khaled Qawasmeh
par Khaled Qawasmeh , Head of Infrastructure and Information Security , Saudi Paper Group

GPMC If you know anything about Group Policy, you probably know that GPMC is used to manage Active Directory-based Group Policy. GPMC provides a comprehensive set of Component Object Model (COM) interfaces that you can use to script many operations. 

GPFIXUP This is used to resolve domain name dependencies in Group Policy objects and Group Policy links after a domain rename operation. 

GPRESULT You can use this tool to see what policy is in effect and to troubleshoot policy problems. 

GPUPDATE This lets you refresh Group Policy manually. Gpupdate replaces the SECEDIT /refreshpolicy tool that was available in Windows2000. If you type gpupdate at a command prompt, both the Computer Configuration settings and the User Configuration settings in Group Policy will be refreshed on the local computer. 

LDIFDE This tool is used to import and export directory information. You can use LDIFDE to help you perform advanced backup and recovery of policy settings that are stored outside of GPOs. Specifically, you can use this tool to back up and restore a large number of Windows Management Instrumentation (WMI) filters at one time. 

Muhammad Anzar
par Muhammad Anzar , DevOps/DevSecOps Architect , Confidential

Nice question. Please see the answer

 

The local Group Policy object on ThisComputerName

gpedit.msc /gpcomputer:" ThisComputerName "

The local Group Policy object on ThisComputerName(specified in the DNS style)

gpedit.msc /gpcomputer:" ThisComputerName.domain.com "

Group Policy objects stored in Active Directory

gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=WingTipToys,DC=com"

Note

  • The GUID for the Group Policy object above is a fictitious example. 

Kefayat Ur Rehman
par Kefayat Ur Rehman , Deputy IT Manager , Herbion International

When we do some changes in group polices we use "gpupdate" CMD to update group policy

Syed Kazim Ali Shah
par Syed Kazim Ali Shah , Data Analyst , World Health Organization - Pakistan Office

You can use powershell scripts on startup

More Questions Like This