Specops GPUpdate is a nice Active Directory tool for remote administration

Specops Gpupdate is a FREE tool that makes your life as an administrator much easier by providing operations such as update of Group Policy Objects, remote restart, wake on lan, WSUS client update and remote shutdown.  That is straight from the Specops website and it is the truth.  I was introduced to this handy little application by a coworker that uses it and it makes his life a little easier.  And as we all know, making things easier is what a good System Administrator does.  Anyhow Specops Gpupdate is a freeware tool that can be downloaded from http://www.specopssoft.com/web/specops-gpupdate.aspx .

Here are the features of Specops Gpupdate.

  • Update Group Policy (gpupdate or secedit /refreshpolicy)
  • Start computers by Wake On Lan (WOL)
  • Remote restart
  • Remote shutdown
  • Immediate WSUS client update
  • Real time graphical reporting

Once downloaded installing the application is easy with the standard Windows MSI install.  However if you didn’t do a little reading in the supplied guide your install will not work.  Once installed on the Windows DC you need to go to the Specops directory and run SpecopsMenuExtension.exe /add .  I don’t think that is the exact name of the file, but once you install it you will have access to the guide and will be able to look up the name.  I installed it at work on our servers and don’t remember the exact name but this is close.  So run this on the domain controller and it will add the commands to the menus in Active Directory.  After going to work I looked up the command and The actual command is SpecopsAducMenuExtensionInstaller.exe /add .

I really like this program because of the WOL or wake-on-LAN feature.  We run a sites that have quite a few remote machines and it would be so nice to just send out a WOL command then having to go to the room or a different building to turn back on a computer that someone shutdown.  But it also has the ability to restart and shutdown computers as well.  The last feature, the gpupdate is nice when you make Group Policy changes and you can send out the update straight from the AD users and computers mmc.

Operation is  pretty simple, just open the Active Directory Users and Computers Microsoft management console or mmc, and right click on the OU with the computers you want to work with.  You can also perform the functions on individual machines instead of the whole OU.  It will open the menu the looks like the following screen shot.

Here is shows all of the options added by Specops.  One thing I did find is that all of the computers have to be members of the DHCP server for the functions to perform correctly.  I like to use the WOL and when the computers were off and had static IP addresses I could not get them to turn back on unless I made them DHCP reservations and added their MACs.  Basically it doesn’t work so hot with static IPs.  This was not a problem for us because our workstations are DHCP clients and only the servers are static so you may want to check this fact out before you add it to a production network.  Also don’t forget to turn on the WOL in the computers BIOs or the WOL function will not work anyway.

Once you select the machines to perform a task you will get a little menu similar to the following screen shot.  This one is for a restart, but the will vary slightly depending on the function being performed.

Once this is sent out you will get another bar graph that will tell you the number that has failed, was successful, or was Offline or blocked by a Firewall.  I don’t have a screen shot of this but it is a nice little window that lets you know if there was any problems.  This little FREE application saves me and the rest of our System Admins a great deal of time running around and turning machines back on.  The other features are nice touches but we already have scripts in place to handle these functions, so the admins don’t use them as much.  So check it out and  it will save you some time and effort.  Plus anything that makes work better is all good in my book.

You may also like...

5 Responses

  1. avatar Jorge says:

    I’m sorry, just watched the Pro version.

  2. avatar Jorge says:

    FREE????, not now.

  3. avatar ogwatermelon says:

    By default, computer Group Policy is updated in the background every 90 minutes. In addition to background updates, Group Policy for the computer is always updated when the system starts. If these policies are Computer based policies not User policies they may never update without a restart. We use gpupdate /force when we update printer deployments or anytime things are just not updating. I have seen computers not update the policies without running gpupdate. Also I have seen whether or not the policy is enforced cause an issue if one policy over rides another. Sorry I really can’t be more help, I just don’t know you AD setup and policies you have in place. Good luck

  4. avatar Colin Forde says:

    Hello
    We use symantec ghost to clone machines. Once cloned and rebooted they dont seem to cleanly apply the group policies following being added to Active Directory. We were thinking of running this gpupdate /force after the sid change to reboot the machine and refresh the policies. Any ideas why policies are not being applied following a reclone.

  5. avatar Brett says:

    I have been using GPUpdate for a couple of years now, it makes it handy to force the policy update to a machine, and reboot it, as not to have to reboot and force updates manually. Love it!

Leave a Reply

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload the CAPTCHA.