Re: Force GP update manually



Here's the problem. First of all, you would need to do it for every GPO in
the domain or identify which GPOs will result in a refresh across all of the
machines, as was requested. In large environments, you would have to make
sure you did all of the changes on the same DC (probably the PDC emulator)
and ensure that someone else isn't coming along and overwriting your version
change with a normal GP change. Second of all, if the environment is Win2K,
and you don't also update the corresponding versionNumber attribute in the
corresponding GPC object, then version numbers will be mismatched and GP
won't process. Third, the revision numbers that are shown in the properties
of the GPO are derived from the version numbers, so if you just arbitrarily
add values to the version number, you will skew this data (1 for each
machine change and 65536 for each user change), in case that matters for
change control.

Finally, I just think its bad practice to recommend manually modifying the
contents of the GPT unless its an absolute need, and certainly not in a mass
way for something as regular as a GP refresh. I think approaching this from
a client perspective is much more reliable and less invasive.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp


"Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:Oejo5DEpFHA.4088@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> Darren Mar-Elia schrieb:
>> The are several problems with updating gpt.ini manually, [...]
>
> Hm, can´t see any problem with it.
> Its a simple textfile and its just a counter. Perhaps it´s not
> the best way to edit it 16times a day, but its the same that would
> happen, if I really edit the GPO 16times a day ...
> AFAIK the Version is not saved in AD.
>
> Thats what even MS recommends (Updating the version in gpt.ini), e.g.
> if you have to reset a DefDomPol or DefDomConPol
>
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> W2K FAQ : http://w2k-faq.ebend.de
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.


.



Relevant Pages

  • Re: Group Policy refresh behavior
    ... GPO refresh happens at reboot, login, and in the background every 90 minutes ... (clock starts at boot for computer side background refresh. ... is it a fixed 90 minute schedule for all> machines in the domain, or is it variable depending on when a particular ...
    (microsoft.public.windows.group_policy)
  • Re: Auto Update
    ... not giving the computer enough time to refresh the ... >User object are in the same container as the GPO applies ... >gpresult shows that the policy isn't applied to the ... >> where the GPO is linked. ...
    (microsoft.public.win2000.group_policy)
  • Re: Custom ADM not resetting value
    ... GPO settings of any kind are not refreshed unless the GPO itself has ... during background refresh, which is every 90 minutes +- for workstations and ... The policy to enable this is ... > POLICY!!EnableAuth ...
    (microsoft.public.win2000.group_policy)
  • Re: Can SP2 Firewall be configured with Login Script in AD?
    ... The machines will refresh their policies within hours. ... but is used to force refresh of that machine's ... To test the policy, use the following command once for each state (network ... >I used my XP SP2 machine created a new GPO in AD Users and Computers ...
    (microsoft.public.win2000.active_directory)
  • Re: Computer der Domain hinzufuegen
    ... Sicherhetitskopie davon mit Hilfe der GPO Verwalt-konsole von MS. ... Die DefDomPol und DefDomContrPol sind sehr empfindlich und wenn Du hier den ... kann das Deine Domäne bzw. Domänenkontroller ... Zu der Sache mit den Kennwörtern: Die Kennwortrichtlinien können nur in der ...
    (microsoft.public.de.german.windows.server.active_directory)