Using SECEDIT to Force a Group Policy Refresh Immediately

ID: Q227302

The information in this article applies to:

Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server

SUMMARY

Changes to a group policy object are not immediately imposed upon the target systems, but rather are applied in accordance with the currently valid group policy refresh interval, which uses random factorization to ensure a somewhat balanced load on domain controllers. For additional information about how this operates, please see the following article in the Microsoft Knowledge Base:

Q203607 How to Modify the Default Group Policy Refresh Interval

This can be an issue when you are attempting to troubleshoot any setting configured using group policy objects. As a workaround, you can use the SECEDIT command-line tool to impose group policy object settings upon a target workstation immediately.

MORE INFORMATION

You can use Secedit.exe with the /REFRESHPOLICY switch to impose group policy object settings upon a target workstation immediately as follows:

SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE: Immediately imposes group policy object settings located within the "machine" node of relevant group policy objects.

SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE: Immediate imposes group policy object settings located within the "User" node of the relevant group policy objects.

Additional query words:

Keywords : kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbinfo