In Windows Server 2003, the secedit command is now obsolete. Instead use gpupdate. I noticed this after changing some of the security options on a server and trying to update them using secedit /refreshpolicy at the command line. Gpupdate is setup to work without options, which is nice. Now I can just type gpupdate at the command line and hit Enter.
Other gpupdate parameters are:
- /target:{computer | user}
- Processes only the Computer settings or the current User settings. By default, both the computer settings and the user settings are processed.
- /force
- Ignores all processing optimizations and reapplies all settings.
- /wait:Value
- Number of seconds that policy processing waits to finish. The default is 600 seconds. 0 equals no wait, and -1 equals wait indefinitely.
- /logoff
- Logs off after the refresh has completed. This is required for those Group Policy client-side extensions that do not process on a background refresh cycle but that do process when the user logs on, such as user Group Policy Software Installation and Folder Redirection. This option has no effect if there are no extensions called that require the user to log off.
- /boot
- Restarts the computer after the refresh has completed. This is required for those Group Policy client-side extensions that do not process on a background refresh cycle but that do process when the computer starts up, such as computer Group Policy Software Installation. This option has no effect if there are no extensions called that require the computer to be restarted.
- /?
- Displays help at the command prompt.
