Hi there,

I'd like to share a tip too

I've made a script that's able to do remote GPUPDATE by the use of WMI. The HTA application connects to the local AD domain and lists all available OU's - you can then select one (and sub-OU's) and send the update command against all computer objects below that OU.

If you want to read more please read my article here:
http://www.windowsecurity.com/articles/How-Force-Remote-Group-Policy-Processing.html

I hope it's useful to someone out there