Remote GPupdate doesnt update remote user

[bigsavedave]

I should probably know this information, but I’m at a loss. Surprisingly, the exact scenario I can’t find elsewhere, although it seems like it would be a common issue.

I need to update User 1’s Group Policy remotely. Easy. I’ll use GPUpdate, right?

I create a remote session on the user’s computer. I am connected as NT Authority/System per whoami.

I type GPUpdate /force to initiate the GPUpdate.

I do gpresults /r after a few minutes.

“Domain/Computer1$” doesn’t have RSoP Data.

That makes sense. I do: gpresults /r /user User 1

“Last time Group Policy was applied: 1 hour ago”

I do: gpupdate /Target:User /force

Last time Group Policy was applied: 1hour and 1 minute ago

How can I update Group Policy for a different user on the system when I’m logged in as a different user?

[ode2joy]

Can you try it from the Group Policy Results wizard on a DC?

[DarkBrewer]

I believe you can use this command to achieve what you want:
invoke-GPUpdate -Computer “YourPcNameHere” -Target “user”
If I’m not mistaken that will schedule the gpupdate as the logged in user and it’ll run a short time after the command is issued.

[phildrew]

Can you have the user run the gpudate command themselves?

We have PDQ, and it’s able to run commands as the logged on user.

[phildrew]

Pretty sure that will update GPO for the currently logged on user issuing that command, not another user logged into the system.

[ode2joy]

Pretty sure you’re right. This is why I recommended GP Results Wizard on the DC, as it actually lists the user profiles on the PC and allows you to refresh whichever user you want:

[bigsavedave]

Unfortunately not. I get an error “The RPC is unavailable.”

[somedude2]

That usually means the DC can’t talk to the client, because the firewall settings are too strict/narrow. That may also be why update isn’t doing some things you expect…

[spiceuser-ti0ay (Malik H.)]

I may be wrong but, in my experience, as long as I see Computer Policies and User Policies showing as updated in the output from gpupdate /force, those user policies usually show up once I am logged in as a user that those policies apply to, instead of an admin. I would confirm with the user if those are showing up when they log back in, or if they can just run the command in command prompt. You don’t need admin rights to do so, and the gpresult command should show those policies applied.