FORCE COMPUTER TO UPDATE AND REPORT STATUS TO WSUS SERVER

After configure the gpo on domain sometimes computer do not synchronize with the wsus server as you expect; even though the policy have been applied already. 
There's some local command that you can use to force computer to contact wsus server, report its status and start downloading the updates.


First, run cmd as an administrator on the local machine.  The syntax is:
wuauclt /detectnow  (This will request the computer to contact wsus server.)
wuauclt /updatenow  (This will force computer to start downloading update from wsus server.)
wuauclt /reportnow  (This will force computer to report currently status of the PC to wsus server.)

Even though you run this command on the local machine generally it takes like 5 minutes to appear on the wsus due to delay scan that the wsus server takes.

Forcing AD Replication

Sometimes relationship between domains do not synchronize as it should. And you want to run a script that force DCs to copy the directories, there's many way that you can accomplish this. Below are the easiest way to do this. You must run cmd as Administrator first. 

1. When you want to synchronize with a specific DC. Syntax is:

repadmin /sync
  <namingcontext>
  <destinationDCname>
  <sourceDCGUID> /force

Namingcontext is LDAP-ese for the particular database that you want to replicate. For example, LDAP's naming context for the me.search.com AD domain is dc=me,dc=search,dc=com. DestinationDCname is the DNS name of the pulling DC. To tell DC1 to pull AD changes from DC2, I replace destinationDCname with DC1.Search.com. 

2. An easier approach uses an option that doesn't require any GUIDs. To force DC1 to pull changes from all its replication partners, The syntax is: 

repadmin /syncall

This omit the naming context and force the DC replicates the forest's schema and configuration naming contexts.