Solution: Use gpupdate to refresh policy immediately. With Gpupdate you can specify certain options at the command line. Gpupdate replaces and improves on the Windows 2000 command secedit /refreshpolicy. Some policy items, such as computer-assigned software, require a reboot to take effect, however. User-assigned software requires the user to log on and log off.