Windows 2000 Domain Controllers refresh to other Windows 2000 Domain Controllers on 5 minute intervals. Non-DC Windows 2000 computers are refreshed every 90 minutes.
If many WIndows 2000 computers requested a refresh at the same time, significant congestion would occur. To avoid this, a random offset interval is added to the refresh interval, to calclate the the refresh cycle. Windows 2000 domain controllers use a 0 minute offset, while non-DC Windows 2000 computers use 30 minutes. The refresh information for user and computer policies are maintained separately.
You can use the Group Policy to change these settings, or you can use the registry:
To change the refresh interval for computers:To immediately impose GPO settings upon a target workstation:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTime
Data Type: REG_DWORD
Range (in minutes): 0 to 64800
To change the offset interval for computers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTimeOffset
Data Type: REG_DWORD
Range (in minutes): 0 to 1440
To change the refresh interval for domain controllers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTimeDC
Data Type: REG_DWORD
Range (in minutes): 0 to 64800
To change the offset interval for domain controllers:
Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTimeOffsetDC
Data Type: REG_DWORD
Range (in minutes): 0 to 1440
To change the refresh interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTime
Data Type: REG_DWORD
Range (in minutes): 0 to 64800
To change the offset interval for users:
Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Value Name: GroupPolicyRefreshTimeOffset
Data Type: REG_DWORD
Range (in minutes): 0 to 1440
Computer:
SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE
User:
SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE
No comments:
Post a Comment