Windows 2000 Group Policy refresh.

Windows 2000 Domain Controllers refresh to other Windows 2000 Domain Controllers on 5 minute intervals. Non-DC Windows 2000 computers are refreshed every 90 minutes.

If many WIndows 2000 computers requested a refresh at the same time, significant congestion would occur. To avoid this, a random offset interval is added to the refresh interval, to calclate the the refresh cycle. Windows 2000 domain controllers use a 0 minute offset, while non-DC Windows 2000 computers use 30 minutes. The refresh information for user and computer policies are maintained separately.

You can use the Group Policy to change these settings, or you can use the registry:

        To change the refresh interval for computers:
       Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTime
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 64800

       To change the offset interval for computers:
       Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTimeOffset
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 1440


       To change the refresh interval for domain controllers:
       Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTimeDC
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 64800


       To change the offset interval for domain controllers:
       Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTimeOffsetDC
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 1440


       To change the refresh interval for users:
       Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTime
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 64800


       To change the offset interval for users:
       Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
       Value Name: GroupPolicyRefreshTimeOffset
       Data Type:  REG_DWORD
       Range (in minutes): 0 to 1440

To immediately impose GPO settings upon a target workstation:

Computer:

SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

User:

SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE

Related Articles by Categories