How to refresh AD Group policy to users and devices that are permanently remote with VPN?

Anonymous
2024-06-27T17:34:57+00:00

Hello,

We have several remote users and devices that are joined to our domain on initial setup while connected to VPN.

These users remain remote and rarely come into the office with their devices.

Is there a good way to refresh User/Computer AD Group policy for users that log in to their device with cached domain credentials and then connect to VPN?

I have read a few articles and most involve running gpupdate /force manually on individual computer devices.

We are trying to figure out a way to get users/computer GPO updates after they get connected to VPN.

Thanks

Windows for business | Windows Server | Directory services | Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-06-28T06:32:04+00:00

    Hi Oneil Matlock,

    Thank you for posting in the Microsoft Community Forums.

    When a user connects to the corporate network via VPN, the VPN connection can be configured to trigger a Group Policy refresh. This typically involves invoking the appropriate command or script in the VPN connection script or configuration to force the reapplication of the AD Group Policy.

    A PowerShell script can be written that runs after a successful VPN connection and triggers a Group Policy refresh. For example, the gpupdate /force command can be used to force immediate application of the group policy.

    Best regards

    Neuvi Jiang

    0 comments No comments