RE: Policy takes so long to take effect

So , the following don't work then?


secedit /refreshpolicy machine_policy /enforce


secedit /refreshpolicy user_policy /enforce

Steve

-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] 
Sent: Thursday, March 06, 2003 10:58 PM
To: Isa List
Subject: [isalist] RE: Policy takes so long to take effect


http://www.ISAserver.org


Yep.

The issues is the way policies are applied.

Default is asymmetric application during startup and log on.

Computer policy is changed. The change is advertised by AD. (Computer
policies are only updated at startup with asymmetric.)

Computer starts and receives advertisement, but is set to asymmetric for
startup speed.

Next start computer downloads policy.

3rd restart policy is applied.

Changing the policy application on the computer to symmetric solves this
but the startup and log on sequence take a lot longer. (Depending on the
policy
change.)

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 2:40 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> http://www.ISAserver.org
> 
> 
> Hi John
> 
> Even when you force the refresh from the DC?
> 
> Steve
> 
> -----Original Message-----
> From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 8:19 PM
> To: Isa List
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> 
> http://www.ISAserver.org
> 
> 
> > I am not bashing ISA, like Virgil I just want to know the reason why

> > ISA
> requires a
> > restart everytime a policy change is made.
> 
> Do you know it can take a Windows XP Pro workstation that is part of 
> an AD domain up to 3 restarts to completely apply a changed computer 
> policy? Thanks MS. :|
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT

> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 
> This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used
> by any person other than Isa List.
> 
> Unauthorised use, disclosure, or copying is strictly prohibited and 
> may be
unlawful.
> Optimum Computer Solutions disclaims any liability for any action 
> taken in connection of this E-Mail. The comments or statements 
> expressed in this
E-Mail
> are not necessarily those of Optimum Computer Solutions or its
subsidiaries or
> affiliates.
> 
> usermanager@xxxxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT

> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> isalist@xxxxxxxxxxxx To unsubscribe send a blank email to 
> $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

This E-Mail is confidential. It is not intended to be read, copied, disclosed 
or used by any person other than Isa List.

Unauthorised use, disclosure, or copying is strictly prohibited and may be 
unlawful. Optimum Computer Solutions disclaims any liability for any action 
taken in connection of this E-Mail. The comments or statements expressed in 
this E-Mail are not necessarily those of Optimum Computer Solutions or its 
subsidiaries or affiliates.

usermanager@xxxxxxxxxxxxxxx




Other related posts: