Re: Why is restarted needed for setting to take effect

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Many thanks for your reply - could I just check something, if I leave members
in a group and then change the settings in the policy that the group is
assigned to, will they still need to logoff/restart for the changes to take
effect?

Thanks

"Florian Frommherz [MVP]" wrote:

Darren,

Darren wrote:
Would anyone know why is I assign a policy to a group of users and computers
then a restart is need on the PC's before the settings take effect, but if I
add the users and computers individually (not in a group) then the settings
take effect at the next policy refresh time without any restart? This is
happening at the moment and I don't really want to have to add each users and
computer individually - it would take too long for a start considering you
can only add one entry at a time.

You are saying that you have Group Policies defined that have security
filtering applied to special AD groups - to filter the scope of the policy?

If so, this is how Windows works. This isn't a Group Policy issue but a
group membership thing as Windows only "refreshes" group membership if
the user logs out and back in / the machine is restarted. This has to do
with the access token that is generated at user logon and machine
startup - group membership is only evaluated at that time to reflect the
changes in the user's /computer's token.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

.

Relevant Pages

  • Re: Domain Audit Policy not applying to one server
    ... settings are being applied from and do the same on one of the other servers ... if the local policy is being overridden by a policy with higher precedence. ... those servers that is using filtering to apply only to certain computers via the GPO ... included or is denied based on group membership or such. ...
    (microsoft.public.win2000.security)
  • Re: Last Post
    ... The EC has been entrusted with IMPLEMENTING policy. ... "The affairs of CCBN shall be governed by a General Meeting held at ... lies with the membership, subject only to the provisions for the time ... say that the AGM *can* set policy, but rarely does, and when it does so it ...
    (uk.rec.naturist)
  • Re: Gp Software Uninstall Issue
    ... because a system restart is required for the settings to be applied. ... Group Policy will attempt to apply the settings the next time the ... Applying this policy to the computers should make Software Installation ...
    (microsoft.public.windows.group_policy)
  • Re: Controlling User Policy via Computer account
    ... I actually tried what you stated regarding security group membership, ... and turning on the loopback option. ... I'm trying to get the screensaver user policy to apply based on the computer ...
    (microsoft.public.windows.group_policy)
  • Re: OT: Possible challenge to Brown
    ... We never had a unilateral policy - older ... The press reports of the speech ... which Labour politicians are going to say is not the case. ...
    (uk.media.radio.archers)