Link to home
Start Free TrialLog in
Avatar of SAM2009
SAM2009Flag for Canada

asked on

Why a GPO need user to logoff/logon sometime?

Hi,

I have a vbs that I linked to a OU by GPO (User configuration). I have edited the vbs file and realized that I need to logoff/logon to get the change. Just GPUPDATE / Force is not enough.

Why is that?
Avatar of Sekar Chinnakannu
Sekar Chinnakannu
Flag of Singapore image

What exactly vbs does, might be the GPO which you linked with vbs files is logon script..

If you want to run the logon scripts at user logon without any delay then the setting should be Disabled
Computer Configuration\Administrative Templates\System\Group Policy: Configure Logon Script Delay
If you want to run the logon scripts after the user logon with delay thn ethe setting should be enabled to set mins.
Computer Configuration\Administrative Templates\System\Group Policy: Configure Logon Script Delay
ASKER CERTIFIED SOLUTION
Avatar of Jeremy Weisinger
Jeremy Weisinger

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
And on top of what others have said: if the policy is done via a security group, the user first needs to refresh their Kerberos token before getting the policy. This is done either via a logoff/logon or every 12 hours by default
Avatar of SAM2009

ASKER

Thanks
Avatar of Jeremy Weisinger
Jeremy Weisinger

Glad to help. :)