Invoke-GPUpdate
Use Invoke-GPUpdate to force a Group Policy refresh on a local or remote computer — without logging on to it or waiting up to 90 minutes.
Documentation: Microsoft Learn — invoke-gpupdate
Syntax
Try it
PowerShell example · browser support is limited.
Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.
Examples
Force a policy refresh on this computer
Show reference output
Illustrative output · values vary by environment
Updating Policy... Computer Policy update has completed successfully. User Policy update has completed successfully.
Force a refresh on a remote server
Show reference output
Illustrative output · values vary by environment
Updating Policy on SRV01... Computer Policy update has completed successfully. User Policy update has completed successfully.
Refresh only computer policy, and reboot if a policy needs it
Show reference output
Illustrative output · values vary by environment
Updating Policy on SRV02... Computer Policy update has completed successfully.
Parameters
Parameter definitions:
-Computer— The remote computer to update. Omit it to update the local computer.-Force— Reapplies every policy setting, not just the ones that changed.-RandomDelayInMinutes— Random delay before the update, from 0 to the value given. Default is up to 10 minutes on remote computers. Use 0 for immediate.-Target— User, Computer, or both. Limits the refresh to one side.-Logoff— Logs the user off if a policy requires it.-Boot— Restarts the computer if a policy requires it.-AsJob— Runs the update as a background job and returns immediately.
Remote updates are delayed by default
The single biggest surprise with Invoke-GPUpdate is that a remote update does not happen immediately. By default the target waits a random delay of up to 10 minutes, so a policy you just pushed looks like it failed. Pass -RandomDelayInMinutes 0 when you need it now.
Remote updates need WinRM and firewall rules for Group Policy remote refresh, plus permission to manage the target computer. If the command fails remotely but works locally, check remoting first, not the policy itself.
Some policies only apply at logon or boot — software installation and folder redirection are the classic examples. -Force alone does not apply those; you need -Logoff or -Boot, or the setting waits for the next restart regardless of how many refreshes you force.
See what applied with Get-GPOReport
Run remote commands with Invoke-Command
Updated 25 October 2026. Browser outputs are fictional; check the installed module help for your environment.
Recap
Invoke-GPUpdate Use Invoke-GPUpdate to force a Group Policy refresh on a local or remote computer — without logging on to it or waiting up to 90 minutes.
All commands