Solved

Why does windows group computer policy run every logon

Posted on 2012-12-26
4
291 Views
Last Modified: 2013-01-11
I am trying to understand policy application for our windows 2008 r2 AD .

Why does the a computer policy run every time at startup when nothing changes in that policy?  The default policy has password item, and a default banner item, that doesnt change.  Yet it takes a full minute to process it everytime someone logs in.

Wouldn't it be more efficient if it didn't apply at startup if it didnt change , that would save all kinds of time.   Is there a way to do this?

2)  Does your computer have to read every policy even if nothing is configured,  How do I make it so it doesn't read my local policy.   Won't this save time.

3)When you apply a group policy, does your workstation retain that policy even if logged off the network.  For example will my laptop retain those settings?
0
Comment
Question by:rjablonk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 38723532
Hi.

1+2) First, you should make clear how you measured that minute it obviously takes. Did you enable GPO logging and you evaluated some log (which, how?)? Or did it just take a minute from password+[enter] to the desktop?
Fact is, by default policies will not process if they haven't changed and we will find out why that's not the case with you.

3)Yes, the settings will retain even when offline.
0
 

Author Comment

by:rjablonk
ID: 38724302
I believe its a minute to run the computer portion of all the policies, because I ran gpresult.  When I read the applied time of the computer settings was  1 minute less than the applied time of the user settings.  

Default policy was the only thing the computer section ran, and I did change not the default policy.

This occured when I restart computer.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 38724350
What exact info of gpresult shows a minute difference? Anyway, that is no way to judge the situation. You should disable all policies (user- and computer-) and restart your computer to see if it's faster, then.
0
 
LVL 4

Accepted Solution

by:
palicos earned 500 total points
ID: 38726594
Please refer to these links.

http://www.youtube.com/watch?v=nmc-saJC6jA

http://www.windowsitpro.com/article/windows-server-20082/new-active-directory-features-in-windows-server-2008-r2

Second for the question you asked you can find the answer on ask-leo.com

http://ask-leo.com/windows.html

Hope it works for you.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question