We help IT Professionals succeed at work.

Setting GPO's for O365

nightshadz asked
My question is in reference to this blog post regarding a GPO (Group Policy Object):


This GPO was pushed out to my machine and another user's machine for testing. Once the GPO was applied, I installed O365 and rebooted. The other user installed O365 and did not reboot. When I logged in, the GPO suppressed the First thing's First prompt for O365 on my machine, but did not on the other user's machine.

I'm not too familiar with the inner working of GPOs, but since this is just applying registry settings, would it be safe to assume that FTF prompt was not disabled because the O365 install overwrote the other user's GPO settings?

In my case, since I rebooted right after the install, did the GPO re-applied the registry settings essentially disabling the FTF prompt?

I'm trying to understand why there were two different experiences.
Watch Question

Distinguished Expert 2018

Group policies are actually not pushed. They are pulled. On boot. On login. And at regular intervals. So unless you actively forced an update on the client, your reboot would've triggered a refresh whereas the other computer simply may not have picked up the change yet.


Thanks for responding Cliff!

The GPO was confirmed via "gpresult -r", however after install the prompt still appeared for this user. Is it possible the install would have overwritten the registry settings causing the prompt to appear? How often are these "regular intervals", or is that determined by the AD admins?
Distinguished Expert 2018
Since 365 is a constantly evolving product, I cannot say with certainty. But I will say I'd be surprised if the setup overwrite registry keys. Even if it does though, as I said, the GP will get re-applied. You could script the deployment to refresh group policies or just deploy when you know the user will be away for a while (off-work hours.)

The interval can be configured, but if I recall correctly, the default is 90 minutes. I haven't had a reason to change it in many years though, so I may remember wrong or the default could have even changed. I'm sure that is documented on TechNet though.


Great! Thank you for the assistance.