Forcing GPOs to apply at connection time

0 pts.
Tags:
DataCenter
Desktops
Management
Microsoft Windows
OS
Security
Servers
SQL Server
How do I force a gpudate /force to run immediately after a connection is made to the network? Even if that connection is made remotely via a wireless aircard and VPN software.
ASKED: November 7, 2006  5:18 PM
UPDATED: November 11, 2006  1:13 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

Hello,

GP is applied each time a user logs on to the network right at the time of logon so there really should be no need to force policy to a user. However there are circumstances when you may want to control the frequency that policies are refreshed throughout the day or prevent GP failures when accessing the network over a slow link or connection. To do this open GP and navigate to Computer Configuration => Administrative Templates => System => Logon and enable the ‘Always wait for network at startup and logon’ policy. Enabling this policy forces a computer to contact a DC (which then will apply GP)at logon and prevents the use of cached credentials over a slower network. The other policy setting is called ‘Group Policy Refresh Interval for Computers’ and is located just down the tree in the Group Policy folder. This setting allows you to set in minutes how often computers on your network should query for GP updates. This is usefull in a busy environment where policy changes occur frequently. Setting a shorter time allows computers to check more often throughout the day for updates where in a smaller environment where changes are less likely to occur, a longer length of time would be suitable.

Hope this helps!

Good luck!

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Mortree
    Also the Computer portion of the GPO is applied BEFORE the user logon...which sounds like what you may be concerned with. I could swear there is also a separate slow link GPO policy setting or two beyond what petroleumman mentioned about waiting for the network.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following