Remotely force group policies refresh

[Anonymous]

Get this tool:
http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/83/Default.aspx
Add this action:

cmd.exe /K \\server\share$\Lansweeper\RGPrefresh.exe /m:{computer}

Before I could use psexec and gpupdate command, but this tools supports remote policy refresh wich is much better 🙂

Regards,
Paulo

[mtaggart]

Specops Software has a free tool for this http://www.specopssoft.com/web/specops-gpupdate.aspx

[Anonymous]

We have policy enforced not to use firewall in our domain, and I'm a Linux user at home so I can't test these small things...

By creating a policy, in the computer context it's possible to run a startup script to stop the firewall service or to run the command I've specified:

netsh firewall set opmode DISABLE

[Hemoco]

No, when the firewall is on you can't do anything, it's like there is no computer on the other side

[Anonymous]

Can you access the remote computer registry in any way (HKLM)? Or using mmc can you remotely access services and stop the firewall service?

[Hemoco]

You can't psexec or any other tool because the workstation is firewalled

[Anonymous]

Well but you can disable firewall remotely before, it's not that hard I believe. Our security is not client based so we don't use windows firewall - I can't test it quickly.

Please try to create an action with:

psexec \\<computer> netsh firewall set opmode DISABLE

[Hemoco]

This is a cool action, but most people's problem is that they want to refresh to policy that turns off the firewall (which won't in this case because the workstation is firewalled)