Difference between revisions of "Group Policy (Active Directory)"

Jump to navigation Jump to search
(→‎Branding: Added "Screen Saver")
Line 1: Line 1:
= Getting Started =
= Getting Started =
To start the Group Policy Managment Console (GPMC)...
# Start <code>mmc.exe</code>
# Start <code>mmc.exe</code>
# Go to '''File <nowiki>|</nowiki> Add/Remove Snap-in...'''
# Go to '''File <nowiki>|</nowiki> Add/Remove Snap-in...'''
Line 6: Line 7:
# Right-click and create a new GPO
# Right-click and create a new GPO


By default group policies are refreshed by client machines every 90 mins, with a random offset of up to 30 mins in order to load balance.  Additionally, Computer Configuration policies are refreshed at boot, and User Configuration polices are refreshed at login.
== Policy Application ==
=== Interval ===
By default group policies are refreshed by client machines every 90 mins, with a random offset of up to 30 mins in order to load balance.  Additionally...
* Computer Configuration policies are refreshed at boot
* User Configuration polices are refreshed at login


To change the interval for
* Computers
** In <code>Computer Configuration <nowiki>|</nowiki> Policies <nowiki>|</nowiki> Administrative Templates <nowiki>|</nowiki> System <nowiki>|</nowiki> Group Policy </code>
** Update ''Group Policy refresh interval for computers''
* Users
** In <code>User Configuration <nowiki>|</nowiki> Policies <nowiki>|</nowiki> Administrative Templates <nowiki>|</nowiki> System <nowiki>|</nowiki> Group Policy </code>
** Update ''Group Policy refresh interval for users''
=== Manual ===
To refresh polices on the current machine
To refresh polices on the current machine
* <code> gpupdate </code>
* <code> gpupdate </code>
To see the results of the last refresh (open the created HTML file)
To see the results of the last refresh (open the created HTML file)
* <code> gpresult /H GPreport.html </code>
* <code> gpresult /H GPreport.html </code>


= Common Policy Paths =
= Common Policy Paths =