Will GPUPDATE force a computer policy refresh, or only user? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com > -----Original Message----- > From: Paul Roberts [mailto:paul.roberts@xxxxxxxxxxxxxxx] > Sent: Friday, March 07, 2003 12:40 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Policy takes so long to take effect > > http://www.ISAserver.org > > > On xp you have to use GPUPDATE instead of secedit > > Paul J Roberts > > -----Original Message----- > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] > Sent: 06 March 2003 23:23 > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Policy takes so long to take effect > > http://www.ISAserver.org > > > If it is a computer startup or shutdown policy, log on or log off does > not > affect. > > John Tolmachoff MCSE, CSSA > IT Manager, Network Engineer > RelianceSoft, Inc. > Fullerton, CA 92835 > www.reliancesoft.com > > > > -----Original Message----- > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] > > Sent: Thursday, March 06, 2003 3:12 PM > > To: [ISAserver.org Discussion List] > > Subject: [isalist] RE: Policy takes so long to take effect > > > > http://www.ISAserver.org > > > > > > Also...... > > > > Obviously things like software installation and folder re-direction > > require a logoff/logon, but not a complete restart > > > > Steve....:)) > > > > -----Original Message----- > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] > > Sent: Thursday, March 06, 2003 11:05 PM > > To: Isa List > > Subject: [isalist] RE: Policy takes so long to take effect > > > > > > http://www.ISAserver.org > > > > > > So , the following don't work then? > > > > > > secedit /refreshpolicy machine_policy /enforce > > > > > > secedit /refreshpolicy user_policy /enforce > > > > Steve > > > > -----Original Message----- > > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] > > Sent: Thursday, March 06, 2003 10:58 PM > > To: Isa List > > Subject: [isalist] RE: Policy takes so long to take effect > > > > > > http://www.ISAserver.org > > > > > > Yep. > > > > The issues is the way policies are applied. > > > > Default is asymmetric application during startup and log on. > > > > Computer policy is changed. The change is advertised by AD. (Computer > > policies are only updated at startup with asymmetric.) > > > > Computer starts and receives advertisement, but is set to asymmetric > for > > startup speed. > > > > Next start computer downloads policy. > > > > 3rd restart policy is applied. > > > > Changing the policy application on the computer to symmetric solves > this > > but the startup and log on sequence take a lot longer. (Depending on > the > > policy > > change.) > > > > John Tolmachoff MCSE, CSSA > > IT Manager, Network Engineer > > RelianceSoft, Inc. > > Fullerton, CA 92835 > > www.reliancesoft.com > > > > > > > -----Original Message----- > > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] > > > Sent: Thursday, March 06, 2003 2:40 PM > > > To: [ISAserver.org Discussion List] > > > Subject: [isalist] RE: Policy takes so long to take effect > > > > > > http://www.ISAserver.org > > > > > > > > > Hi John > > > > > > Even when you force the refresh from the DC? > > > > > > Steve > > > > > > -----Original Message----- > > > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] > > > Sent: Thursday, March 06, 2003 8:19 PM > > > To: Isa List > > > Subject: [isalist] RE: Policy takes so long to take effect > > > > > > > > > http://www.ISAserver.org > > > > > > > > > > I am not bashing ISA, like Virgil I just want to know the reason > why > > > > > > ISA > > > requires a > > > > restart everytime a policy change is made. > > > > > > Do you know it can take a Windows XP Pro workstation that is part of > > > an AD domain up to 3 restarts to completely apply a changed computer > > > policy? Thanks MS. :| > > > > > > John Tolmachoff MCSE, CSSA > > > IT Manager, Network Engineer > > > RelianceSoft, Inc. > > > Fullerton, CA 92835 > > > www.reliancesoft.com > > > > > > > > > > > > > > > > > > ------------------------------------------------------ > > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > > ------------------------------------------------------ > > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > > Security Resource Site: http://www.windowsecurity.com/ Windows > 2000/NT > > > > > Fax Solutions: http://www.ntfaxfaq.com > > > ------------------------------------------------------ > > > You are currently subscribed to this ISAserver.org Discussion List > as: > > > > > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to > > > $subst('Email.Unsub') > > > > > > This E-Mail is confidential. It is not intended to be read, copied, > > disclosed or used > > > by any person other than Isa List. > > > > > > Unauthorised use, disclosure, or copying is strictly prohibited and > > > may be > > unlawful. > > > Optimum Computer Solutions disclaims any liability for any action > > > taken in connection of this E-Mail. The comments or statements > > > expressed in this > > E-Mail > > > are not necessarily those of Optimum Computer Solutions or its > > subsidiaries or > > > affiliates. > > > > > > usermanager@xxxxxxxxxxxxxxx > > > > > > > > > > > > ------------------------------------------------------ > > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > > ------------------------------------------------------ > > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > > Security Resource Site: http://www.windowsecurity.com/ Windows > 2000/NT > > > > > Fax Solutions: http://www.ntfaxfaq.com > > > ------------------------------------------------------ > > > You are currently subscribed to this ISAserver.org Discussion List > as: > > > > > isalist@xxxxxxxxxxxx To unsubscribe send a blank email to > > > $subst('Email.Unsub') > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT > > Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion List as: > > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to > > $subst('Email.Unsub') > > > > This E-Mail is confidential. It is not intended to be read, copied, > > disclosed or used by any person other than Isa List. > > > > Unauthorised use, disclosure, or copying is strictly prohibited and > may > > be unlawful. Optimum Computer Solutions disclaims any liability for > any > > action taken in connection of this E-Mail. The comments or statements > > expressed in this E-Mail are not necessarily those of Optimum Computer > > Solutions or its subsidiaries or affiliates. > > > > usermanager@xxxxxxxxxxxxxxx > > > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ > > Windows Security Resource Site: http://www.windowsecurity.com/ > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion List as: > > steve@xxxxxxxxxxxxxxx > > To unsubscribe send a blank email to > $subst('Email.Unsub') > > > > This E-Mail is confidential. It is not intended to be read, copied, > disclosed or used > > by any person other than Isa List. > > > > Unauthorised use, disclosure, or copying is strictly prohibited and > may be > unlawful. > > Optimum Computer Solutions disclaims any liability for any action > taken in > > connection of this E-Mail. The comments or statements expressed in > this > E-Mail > > are not necessarily those of Optimum Computer Solutions or its > subsidiaries or > > affiliates. > > > > usermanager@xxxxxxxxxxxxxxx > > > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ > > Windows Security Resource Site: http://www.windowsecurity.com/ > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion List as: > > isalist@xxxxxxxxxxxx > > To unsubscribe send a blank email to > $subst('Email.Unsub') > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: http://www.windowsecurity.com/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > paul.roberts@xxxxxxxxxxxxxxx > To unsubscribe send a blank email to > $subst('Email.Unsub') > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: http://www.windowsecurity.com/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > isalist@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub')