CompTIA A+ Core 2 (220-1202)Operating SystemsMedium
A company is deploying new Windows 11 workstations across its network. The IT department needs to ensure that all new computers automatically receive and apply the latest security policies and software configurations defined by the Active Directory Group Policy Objects (GPOs). Which command-line utility should be used to force an immediate update of these policies on a client machine?
- Adism /online /cleanup-image /restorehealth
- Bsfc /scannow
- Cgpresult
- Dgpupdate
Show answer & explanationAnswer & explanation
Correct answer: D. gpupdate
The gpupdate command is specifically used to refresh Group Policy settings on a local computer, forcing it to apply any new or changed policies from Active Directory.
Why the other options are wrong
- A. dism /online /cleanup-image /restorehealth is used to repair Windows images, unrelated to Group Policy application.
- B. sfc /scannow is used to scan and repair corrupted system files, unrelated to Group Policy.
- C. gpresult displays the Resultant Set of Policy (RSoP) for a user or computer, but does not apply policies.
gpupdate command
A Windows command-line utility used to refresh local and Active Directory-based Group Policy settings on a computer or user account.
- Immediately applies new or changed GPOs.
- Can be used with '/force' to reapply all policies.
- Essential for verifying Group Policy deployment.
Memory trick: GPUPDATE 'updates' your Group Policies.