JSI Tip 2184. Windows 2000 Group Policy refresh


Windows 2000 Domain Controllers refresh to other Windows 2000 Domain Controllers on 5 minute intervals. Non-DC Windows 2000 computers are refreshed every 90 minutes.

If many WIndows 2000 computers requested a refresh at the same time, significant congestion would occur. To avoid this, a random offset interval is added to the refresh interval, to calclate the the refresh cycle. Windows 2000 domain controllers use a 0 minute offset, while non-DC Windows 2000 computers use 30 minutes. The refresh information for user and computer policies are maintained separately.

You can use the Group Policy to change these settings, or you can use the registry:

        To change the refresh interval for computers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTime
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800 

        To change the offset interval for computers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffset
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440


        To change the refresh interval for domain controllers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeDC
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800


        To change the offset interval for domain controllers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffsetDC
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440


        To change the refresh interval for users:
        Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTime
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800


        To change the offset interval for users:
        Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffset
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440
To immediately impose GPO settings upon a target workstation:

            Computer:

                         SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

            User:

                         SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE


Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish