Monday 1 July 2013

Ensuring that group policy is applied before logon

By default group policies are applied asynchronously - Fast Logon Optimization . The upshot is that if you update a policy users may logon before the latest policy is applied and it may take a couple of logons before current settings are applied.

I am messing about with GPOs in a test environment so I don’t want to have to constantly rebooting PC or perform multiple logons attempts.

Disable Fast Logon Optimization by using the following

Create or update and existing group policy attached to the OU housing the computers and edit the following.

Computer Configuration
 
Policies
   
Administrative Templates
      System
        Logon

Enable: Always wait for the network at computer startup and logon

image

No comments:

Post a Comment