We recently installed WSUS in our environment to automate security patches. During our first scheduled maintenance, we quickly realized that not all of our machines recieved the patch. Upon further investigation, we found that these machines did not upate themselves according to the GPO we had put in place.

The steps below show you how to overcome this problem by using GPUpdate, and Sysinternal's PSEXEC to force all of your machines to check in with AD, and update their policies accordingly!

We will begin by downloading PSExec. Once downloaded, copy this executable into a directory on the PC from which you plan to run the script - for this example we will use C:\Data.

Now, we need to create a TXT file with all of the systems that need to be updated. There are a few ways to accomplish this. You can easily create a .txt file by Opening AD Users and Computers, selecting an OU, and choosing ‘Export List’ Export the file as a .CSV.