Outdated policy

I have about 50 pc's (out of 600) that are listed as having outdated
Forefront policies. What's the easiest way to insure they each get an
updated policy?

1. If the machines are in a security group, a reboot will help
2. If the machines are in a OU, run gpupdate /force manully on each machine.
3. Are the 50 machines removed from AD already ?



"DML-CEG" <DML-CEG@newsgroup.nospam> wrote in message
news:17344CBE-5A31-4A3A-96C8-3BA944A1C646@microsoft.com...
>I have about 50 pc's (out of 600) that are listed as having outdated
>Forefront policies. What's the easiest way to insure they each get an
>updated policy?