RE: Policy takes so long to take effect
- From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 6 Mar 2003 15:21:37 -0800
The user will work.
I have not tried forcing a refresh on a machine policy on a XP client. I
know it works on a 2000 Pro fine.
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 3:05 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Policy takes so long to take effect
>
> http://www.ISAserver.org
>
>
> So , the following don't work then?
>
>
> secedit /refreshpolicy machine_policy /enforce
>
>
> secedit /refreshpolicy user_policy /enforce
>
> Steve
>
> -----Original Message-----
> From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> Sent: Thursday, March 06, 2003 10:58 PM
> To: Isa List
> Subject: [isalist] RE: Policy takes so long to take effect
>
>
> http://www.ISAserver.org
>
>
> Yep.
>
> The issues is the way policies are applied.
>
> Default is asymmetric application during startup and log on.
>
> Computer policy is changed. The change is advertised by AD. (Computer
> policies are only updated at startup with asymmetric.)
>
> Computer starts and receives advertisement, but is set to asymmetric for
> startup speed.
>
> Next start computer downloads policy.
>
> 3rd restart policy is applied.
>
> Changing the policy application on the computer to symmetric solves this
> but the startup and log on sequence take a lot longer. (Depending on the
> policy
> change.)
>
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA 92835
> www.reliancesoft.com
>
>
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 2:40 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> > http://www.ISAserver.org
> >
> >
> > Hi John
> >
> > Even when you force the refresh from the DC?
> >
> > Steve
> >
> > -----Original Message-----
> > From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
> > Sent: Thursday, March 06, 2003 8:19 PM
> > To: Isa List
> > Subject: [isalist] RE: Policy takes so long to take effect
> >
> >
> > http://www.ISAserver.org
> >
> >
> > > I am not bashing ISA, like Virgil I just want to know the reason why
>
> > > ISA
> > requires a
> > > restart everytime a policy change is made.
> >
> > Do you know it can take a Windows XP Pro workstation that is part of
> > an AD domain up to 3 restarts to completely apply a changed computer
> > policy? Thanks MS. :|
> >
> > John Tolmachoff MCSE, CSSA
> > IT Manager, Network Engineer
> > RelianceSoft, Inc.
> > Fullerton, CA 92835
> > www.reliancesoft.com
> >
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
>
> > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
>
> > steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> > This E-Mail is confidential. It is not intended to be read, copied,
> disclosed or used
> > by any person other than Isa List.
> >
> > Unauthorised use, disclosure, or copying is strictly prohibited and
> > may be
> unlawful.
> > Optimum Computer Solutions disclaims any liability for any action
> > taken in connection of this E-Mail. The comments or statements
> > expressed in this
> E-Mail
> > are not necessarily those of Optimum Computer Solutions or its
> subsidiaries or
> > affiliates.
> >
> > usermanager@xxxxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/ Windows
> > Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
>
> > Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
>
> > isalist@xxxxxxxxxxxx To unsubscribe send a blank email to
> > $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
> This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used
> by any person other than Isa List.
>
> Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful.
> Optimum Computer Solutions disclaims any liability for any action taken in
> connection of this E-Mail. The comments or statements expressed in this
E-Mail
> are not necessarily those of Optimum Computer Solutions or its
subsidiaries or
> affiliates.
>
> usermanager@xxxxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
