Darrell Norton's Blog [MVP]

Sponsors

The Lounge

News

  • Darrell Norton pic

    MVP logo

    View Darrell Norton's profile on LinkedIn

    Currently Reading:

    weewar.com

Advertisement

Images in this post missing? We recently lost them in a site migration. We're working to restore these as you read this. Should you need an image in an emergency, please contact us at imagehelp@codebetter.com
Gpupdate replaces secedit's /refreshpolicy option in Windows Server 2003

In Windows Server 2003, the secedit command is now obsolete.  Instead use gpupdate.  I noticed this after changing some of the security options on a server and trying to update them using secedit /refreshpolicy at the command line.  Gpupdate is setup to work without options, which is nice.  Now I can just type gpupdate at the command line and hit Enter.

Other gpupdate parameters are:

/target:{computer | user}
Processes only the Computer settings or the current User settings. By default, both the computer settings and the user settings are processed.
/force
Ignores all processing optimizations and reapplies all settings.
/wait:Value
Number of seconds that policy processing waits to finish. The default is 600 seconds. 0 equals no wait, and -1 equals wait indefinitely.
/logoff
Logs off after the refresh has completed. This is required for those Group Policy client-side extensions that do not process on a background refresh cycle but that do process when the user logs on, such as user Group Policy Software Installation and Folder Redirection. This option has no effect if there are no extensions called that require the user to log off.
/boot
Restarts the computer after the refresh has completed. This is required for those Group Policy client-side extensions that do not process on a background refresh cycle but that do process when the computer starts up, such as computer Group Policy Software Installation. This option has no effect if there are no extensions called that require the computer to be restarted.
/?
Displays help at the command prompt.

Posted 03-16-2004 7:28 AM by Darrell Norton

[Advertisement]

Comments

Tharg wrote re: Gpupdate replaces secedit's /refreshpolicy option in Windows Server 2003
on 03-27-2004 1:49 AM
SECEDIT isn't totally obsolete in 2K3 - you can also use the secedit command to reapply default settings for specific areas instead of applying the entire setup security template.

http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/secedit_cmds.asp
Darrell wrote re: Gpupdate replaces secedit's /refreshpolicy option in Windows Server 2003
on 03-28-2004 4:32 AM
Tharg - I did not know that. Every time I ran secedit, it kept showing me the HELP file on gpupdate! Good link too.