RE: Policy takes so long to take effect

  • From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 7 Mar 2003 07:59:10 -0800

Will GPUPDATE force a computer policy refresh, or only user?

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com

> -----Original Message-----
> From: Paul Roberts [mailto:paul.roberts@xxxxxxxxxxxxxxx]
> Sent: Friday, March 07, 2003 12:40 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> http://www.ISAserver.org
> 
> 
> On xp you have to use GPUPDATE instead of secedit
> 
> Paul J Roberts
> 
> -----Original Message-----
> From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> Sent: 06 March 2003 23:23
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
> 
> http://www.ISAserver.org
> 
> 
> If it is a computer startup or shutdown policy, log on or log off does
> not
> affect.
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 3:12 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> > http://www.ISAserver.org
> >
> >
> > Also......
> >
> > Obviously things like software installation and folder re-direction
> > require a logoff/logon, but not a complete restart
> >
> > Steve....:))
> >
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 11:05 PM
> > To: Isa List
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> >
> > http://www.ISAserver.org
> >
> >
> > So , the following don't work then?
> >
> >
> > secedit /refreshpolicy machine_policy /enforce
> >
> >
> > secedit /refreshpolicy user_policy /enforce
> >
> > Steve
> >
> > -----Original Message-----
> > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 10:58 PM
> > To: Isa List
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Yep.
> >
> > The issues is the way policies are applied.
> >
> > Default is asymmetric application during startup and log on.
> >
> > Computer policy is changed. The change is advertised by AD. (Computer
> > policies are only updated at startup with asymmetric.)
> >
> > Computer starts and receives advertisement, but is set to asymmetric
> for
> > startup speed.
> >
> > Next start computer downloads policy.
> >
> > 3rd restart policy is applied.
> >
> > Changing the policy application on the computer to symmetric solves
> this
> > but the startup and log on sequence take a lot longer. (Depending on
> the
> > policy
> > change.)
> >
> > John Tolmachoff MCSE, CSSA
> > IT Manager, Network Engineer
> > RelianceSoft, Inc.
> > Fullerton, CA  92835
> > www.reliancesoft.com
> >
> >
> > > -----Original Message-----
> > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> > > Sent: Thursday, March 06, 2003 2:40 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Policy takes so long to take effect
> > >
> > > http://www.ISAserver.org
> > >
> > >
> > > Hi John
> > >
> > > Even when you force the refresh from the DC?
> > >
> > > Steve
> > >
> > > -----Original Message-----
> > > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> > > Sent: Thursday, March 06, 2003 8:19 PM
> > > To: Isa List
> > > Subject: [isalist] RE: Policy takes so long to take effect
> > >
> > >
> > > http://www.ISAserver.org
> > >
> > >
> > > > I am not bashing ISA, like Virgil I just want to know the reason
> why
> >
> > > > ISA
> > > requires a
> > > > restart everytime a policy change is made.
> > >
> > > Do you know it can take a Windows XP Pro workstation that is part of
> > > an AD domain up to 3 restarts to completely apply a changed computer
> > > policy? Thanks MS. :|
> > >
> > > John Tolmachoff MCSE, CSSA
> > > IT Manager, Network Engineer
> > > RelianceSoft, Inc.
> > > Fullerton, CA  92835
> > > www.reliancesoft.com
> > >
> > >
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > > Security Resource Site: http://www.windowsecurity.com/ Windows
> 2000/NT
> >
> > > Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> >
> > > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> > > $subst('Email.Unsub')
> > >
> > > This E-Mail is confidential. It is not intended to be read, copied,
> > disclosed or used
> > > by any person other than Isa List.
> > >
> > > Unauthorised use, disclosure, or copying is strictly prohibited and
> > > may be
> > unlawful.
> > > Optimum Computer Solutions disclaims any liability for any action
> > > taken in connection of this E-Mail. The comments or statements
> > > expressed in this
> > E-Mail
> > > are not necessarily those of Optimum Computer Solutions or its
> > subsidiaries or
> > > affiliates.
> > >
> > > usermanager@xxxxxxxxxxxxxxx
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > > Security Resource Site: http://www.windowsecurity.com/ Windows
> 2000/NT
> >
> > > Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> >
> > > isalist@xxxxxxxxxxxx To unsubscribe send a blank email to
> > > $subst('Email.Unsub')
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> > This E-Mail is confidential. It is not intended to be read, copied,
> > disclosed or used by any person other than Isa List.
> >
> > Unauthorised use, disclosure, or copying is strictly prohibited and
> may
> > be unlawful. Optimum Computer Solutions disclaims any liability for
> any
> > action taken in connection of this E-Mail. The comments or statements
> > expressed in this E-Mail are not necessarily those of Optimum Computer
> > Solutions or its subsidiaries or affiliates.
> >
> > usermanager@xxxxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > steve@xxxxxxxxxxxxxxx
> > To unsubscribe send a blank email to
> $subst('Email.Unsub')
> >
> > This E-Mail is confidential. It is not intended to be read, copied,
> disclosed or used
> > by any person other than Isa List.
> >
> > Unauthorised use, disclosure, or copying is strictly prohibited and
> may be
> unlawful.
> > Optimum Computer Solutions disclaims any liability for any action
> taken in
> > connection of this E-Mail. The comments or statements expressed in
> this
> E-Mail
> > are not necessarily those of Optimum Computer Solutions or its
> subsidiaries or
> > affiliates.
> >
> > usermanager@xxxxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > isalist@xxxxxxxxxxxx
> > To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> paul.roberts@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: