• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5602
  • Last Modified:

How long does it take for GPO to take effect?

How long does it take for GPO to take effect? does the workstation update live or do you have to reboot?. Does GPUPDATE make the workstation update while logged in.
Confusing some times thanks for the help
0
fessiambre
Asked:
fessiambre
  • 5
  • 2
  • 2
  • +1
2 Solutions
 
Walter PadrónCommented:
Hi, fessiambre

By default, domain controllers are refreshed every five minutes, and all other computers are refreshed every 90 minutes, with a random factor of up plus or minus 30 minutes. (The refresh interval can be modified by a Group Policy Setting)

Use "gpupdate /force" to reapply all policy settings. By default, only policy settings that have changed are applied.

cheers
0
 
Rob WilliamsCommented:
The GPO will be updated on the workstation automatically within 90 minutes. If you wish to force an immediate update, from a command line enter gpupdate /force if XP, or for 2000:
for a machine policy:
secedit /refreshpolicy machine_policy
for a user policy:
secedit /refreshpolicy user_policy

Yes gpupdate will force an update while the user is logged in, however some policies require you log off to be enforced. If that is the case with your update you will be asked. It is actually best in the latter case to re-boot.
0
 
Walter PadrónCommented:
Hi, fessiambre

I missed one, yes your workstation is updated live but some policies (for instance, startup/login scripts) are executed only on reboot or user logon.

cheers
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
fessiambreAuthor Commented:
thanks guys will GPUPDATE /force on the server make all machines update or just  on  each machine?
0
 
Rob WilliamsCommented:
You have to run gpupdate on the machine you want to update. Running on the server will only update the server itself. By the way, the server automatic refresh interval I believe is 5 minutes rather than the 90 with workstations.
0
 
fessiambreAuthor Commented:
so the workstations by default update every 5 min or 90?
0
 
Rob WilliamsCommented:
Server every 5 minutes
Workstations every 90 minutes.
0
 
Rob WilliamsCommented:
By the way, in case there is some confusion, the server updates itself every 5 minutes, in other words it updates any policies affecting only the server itself. That refresh has nothing to do with the workstations.
0
 
Jay_Jay70Commented:
Hi wpadron,

gpupdate - loads the policy for next restart
gpupdate /force - forces all user settings then and there

a lot of computer policies will not take affect unless you restart once, or even twice

sorry if i have trodden on already trodden ground

you can also increase the the policy refresh interval using a few reg hacks, it is also best to refresh the policy on the server before the clients

Cheers!
0
 
Rob WilliamsCommented:
Thanks fessiambre,
--Rob
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now