Group Policy Refresh Interval

Discussion in 'Active Directory' started by aazpf1, Mar 14, 2006.

  1. aazpf1

    aazpf1 Guest

    Good Day, i have a Win2003 AD environment. The question is:
    If i enable and set the GP refresh interval, do i need to create a new GPO
    and link it to the domain for it to work or is it a settings that just makes
    all other existing GPO refreshing at the interval I set??

    In other words, if i just set the interval and no create a GPO linked to
    domain, such as "refresh gp", will it work on the other GPO's i have in
    place??

    thanks for helping out

    AAZPF1
     
    aazpf1, Mar 14, 2006
    #1
    1. Advertisements

  2. aazpf1

    Herb Martin Guest

    You need to link at least one GPO with the new interval
    to (all of) the machines that should use that interval, e.g.,
    link the GPO to the domain.

    It will change the refresh internal for all GPOs since on
    refresh ALL GPOs are (re)processed.
    Yes. (As long as no other GPO overides it. For instance the
    "Default Domain Controller" GPO already has an overide for
    the DCs set to 5, or is it 15 minutes?, I believe.)
     
    Herb Martin, Mar 14, 2006
    #2
    1. Advertisements

  3. aazpf1

    aazpf1 Guest

    Thanks Herb for replying...sorry i just want to make surei understand right:
    I have already some GPOs linked to the domain. When i changed some settings
    i have to run a gpupdate command.
    If i enable to refresh interval (now disabled) and set interval, is that all
    i need to do ??
    This is as somebody told me i have to create a GPO just for the refresh
    interval and link it to domain...
    Sorry i didnt get properly first answer but i need to make double sure how
    it works

    thanks a lot

    aazpf1

     
    aazpf1, Mar 14, 2006
    #3
  4. Yes, you only need to set this once at the domain level if you want it to
    apply to all systems (except DCs - which will override the setting at
    OU=Domain Controllers). Basically, you are configuring the GPO CSEs on each
    system.

    You will have to wait for this new policy to be processed before the change
    happens on the PCs though. Although you can, as indeed you have been, force
    this. Remember that most of the CSEs only process GPOs when they change, so
    this won't modify that behaviour. Rather, it will just modify the frequency
    with which systems check for updates (and apply as necessary).
     
    Paul Williams [MVP], Mar 14, 2006
    #4
  5. Yes. (As long as no other GPO overides it. For instance the "Default
    5 minutes by default Herb.
     
    Paul Williams [MVP], Mar 14, 2006
    #5
  6. aazpf1

    Herb Martin Guest

    No, you can just wait for the DEFAULT Refresh interval.
    (90 minutes) as long as it is Security or Registry based
    (i.e., not Software deployments.)
    Unless you have somehow disabled the default refresh which
    is normally every 90 minutes (5 for DCs.)
    If you wish to change the refresh internal you must set it
    SOMEWHERE -- but that could be in an existing OR
    new GPO.
    What is actually confusing you? You just set it to the
    value you wish in some GPO (and don't override it in
    a later GPO.)


    --
    Herb Martin, MCSE, MVP
    Accelerated MCSE
    http://www.LearnQuick.Com
    [phone number on web site]
     
    Herb Martin, Mar 15, 2006
    #6
  7. aazpf1

    aazpf1 Guest

    Good morning and thank you both,

    i understand.
    Herb, what was confusing me and actually re-reading my question i possibly
    didn't explain properly my doubt) was that what i was told was i need to
    create an additional GPO just for the refresh interval for it to work for all
    already existing GPOs
    So as you say i don't need to create this additional GPO just for the
    refresh purpose

    Many thanks
     
    aazpf1, Mar 16, 2006
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.