RE: Policy takes so long to take effect
- From: "Steve Moffat" <steve@xxxxxxxxxxxxxxx>
- To: "Isa List" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 6 Mar 2003 23:12:27 -0000
Also......
Obviously things like software installation and folder re-direction
require a logoff/logon, but not a complete restart
Steve....:))
-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
Sent: Thursday, March 06, 2003 11:05 PM
To: Isa List
Subject: [isalist] RE: Policy takes so long to take effect
http://www.ISAserver.org
So , the following don't work then?
secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce
Steve
-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
Sent: Thursday, March 06, 2003 10:58 PM
To: Isa List
Subject: [isalist] RE: Policy takes so long to take effect
http://www.ISAserver.org
Yep.
The issues is the way policies are applied.
Default is asymmetric application during startup and log on.
Computer policy is changed. The change is advertised by AD. (Computer
policies are only updated at startup with asymmetric.)
Computer starts and receives advertisement, but is set to asymmetric for
startup speed.
Next start computer downloads policy.
3rd restart policy is applied.
Changing the policy application on the computer to symmetric solves this
but the startup and log on sequence take a lot longer. (Depending on the
policy
change.)
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 2:40 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
>
> http://www.ISAserver.org
>
>
> Hi John
>
> Even when you force the refresh from the DC?
>
> Steve
>
> -----Original Message-----
> From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 8:19 PM
> To: Isa List
> Subject: [isalist] RE: Policy takes so long to take effect
>
>
> http://www.ISAserver.org
>
>
> > I am not bashing ISA, like Virgil I just want to know the reason why
> > ISA
> requires a
> > restart everytime a policy change is made.
>
> Do you know it can take a Windows XP Pro workstation that is part of
> an AD domain up to 3 restarts to completely apply a changed computer
> policy? Thanks MS. :|
>
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA 92835
> www.reliancesoft.com
>
>
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
> This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used
> by any person other than Isa List.
>
> Unauthorised use, disclosure, or copying is strictly prohibited and
> may be
unlawful.
> Optimum Computer Solutions disclaims any liability for any action
> taken in connection of this E-Mail. The comments or statements
> expressed in this
E-Mail
> are not necessarily those of Optimum Computer Solutions or its
subsidiaries or
> affiliates.
>
> usermanager@xxxxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than Isa List.
Unauthorised use, disclosure, or copying is strictly prohibited and may
be unlawful. Optimum Computer Solutions disclaims any liability for any
action taken in connection of this E-Mail. The comments or statements
expressed in this E-Mail are not necessarily those of Optimum Computer
Solutions or its subsidiaries or affiliates.
usermanager@xxxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
This E-Mail is confidential. It is not intended to be read, copied, disclosed
or used by any person other than Isa List.
Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful. Optimum Computer Solutions disclaims any liability for any action
taken in connection of this E-Mail. The comments or statements expressed in
this E-Mail are not necessarily those of Optimum Computer Solutions or its
subsidiaries or affiliates.
usermanager@xxxxxxxxxxxxxxx
Other related posts:
