RE: Policy takes so long to take effect

If it is a computer startup or shutdown policy, log on or log off does not
affect.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com


> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 3:12 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> http://www.ISAserver.org
> 
> 
> Also......
> 
> Obviously things like software installation and folder re-direction
> require a logoff/logon, but not a complete restart
> 
> Steve....:))
> 
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 11:05 PM
> To: Isa List
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> 
> http://www.ISAserver.org
> 
> 
> So , the following don't work then?
> 
> 
> secedit /refreshpolicy machine_policy /enforce
> 
> 
> secedit /refreshpolicy user_policy /enforce
> 
> Steve
> 
> -----Original Message-----
> From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 10:58 PM
> To: Isa List
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> 
> http://www.ISAserver.org
> 
> 
> Yep.
> 
> The issues is the way policies are applied.
> 
> Default is asymmetric application during startup and log on.
> 
> Computer policy is changed. The change is advertised by AD. (Computer
> policies are only updated at startup with asymmetric.)
> 
> Computer starts and receives advertisement, but is set to asymmetric for
> startup speed.
> 
> Next start computer downloads policy.
> 
> 3rd restart policy is applied.
> 
> Changing the policy application on the computer to symmetric solves this
> but the startup and log on sequence take a lot longer. (Depending on the
> policy
> change.)
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 2:40 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> > http://www.ISAserver.org
> >
> >
> > Hi John
> >
> > Even when you force the refresh from the DC?
> >
> > Steve
> >
> > -----Original Message-----
> > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 8:19 PM
> > To: Isa List
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> >
> > http://www.ISAserver.org
> >
> >
> > > I am not bashing ISA, like Virgil I just want to know the reason why
> 
> > > ISA
> > requires a
> > > restart everytime a policy change is made.
> >
> > Do you know it can take a Windows XP Pro workstation that is part of
> > an AD domain up to 3 restarts to completely apply a changed computer
> > policy? Thanks MS. :|
> >
> > John Tolmachoff MCSE, CSSA
> > IT Manager, Network Engineer
> > RelianceSoft, Inc.
> > Fullerton, CA  92835
> > www.reliancesoft.com
> >
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> 
> > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> 
> > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> > This E-Mail is confidential. It is not intended to be read, copied,
> disclosed or used
> > by any person other than Isa List.
> >
> > Unauthorised use, disclosure, or copying is strictly prohibited and
> > may be
> unlawful.
> > Optimum Computer Solutions disclaims any liability for any action
> > taken in connection of this E-Mail. The comments or statements
> > expressed in this
> E-Mail
> > are not necessarily those of Optimum Computer Solutions or its
> subsidiaries or
> > affiliates.
> >
> > usermanager@xxxxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> 
> > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> 
> > isalist@xxxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
> This E-Mail is confidential. It is not intended to be read, copied,
> disclosed or used by any person other than Isa List.
> 
> Unauthorised use, disclosure, or copying is strictly prohibited and may
> be unlawful. Optimum Computer Solutions disclaims any liability for any
> action taken in connection of this E-Mail. The comments or statements
> expressed in this E-Mail are not necessarily those of Optimum Computer
> Solutions or its subsidiaries or affiliates.
> 
> usermanager@xxxxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> steve@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used
> by any person other than Isa List.
> 
> Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful.
> Optimum Computer Solutions disclaims any liability for any action taken in
> connection of this E-Mail. The comments or statements expressed in this
E-Mail
> are not necessarily those of Optimum Computer Solutions or its
subsidiaries or
> affiliates.
> 
> usermanager@xxxxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: