Manual Policy Updates

[Kryten]

Hi,

Windows 2003 Server SP2
When I make a change to the domain policy I notice that my two member
servers don't seem to reflect the update in their local security
policy until I reboot them. Then the LSP settings show the new values.
I try running gpupdate /force from the cmd line on these boxes but no
joy.

Also I have a number of servers that are standalone, is there any way
to refresh their local security policy after modifying it without
rebooting?

Would appreciate any advice.

Thanks,
Stuart

 

[Lanwench [MVP - Exchange]]

Re: Manual Policy Updates

Kryten <Kryten68@googlemail.com> wrote:
> Hi,
>
> Windows 2003 Server SP2
> When I make a change to the domain policy I notice that my two member
> servers don't seem to reflect the update in their local security
> policy until I reboot them. Then the LSP settings show the new values.
> I try running gpupdate /force from the cmd line on these boxes but no
> joy.
>
Event logs & the result of an rsop.msc may help...


> Also I have a number of servers that are standalone, is there any way
> to refresh their local security policy after modifying it without
> rebooting?

What happens if you run gpupdate /force on them?
>
> Would appreciate any advice.
>
> Thanks,
> Stuart

 

[Meinolf Weber]

Re: Manual Policy Updates

Hello Kryten,

See inline.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> Windows 2003 Server SP2
> When I make a change to the domain policy I notice that my two member
> servers don't seem to reflect the update in their local security
> policy until I reboot them. Then the LSP settings show the new values.
> I try running gpupdate /force from the cmd line on these boxes but no
> joy.

Make sure that you only use internal DNS servers on the servers NIC. Also
gpupdate /force will only work if the policy is replicated to all DC's. If
the member servers are "talking" to a DC which does not have the changed
policy yet, well ofcourse no change. Use replmon to replicate manuel in the
domain after changing the policy.

> Also I have a number of servers that are standalone, is there any way
> to refresh their local security policy after modifying it without
> rebooting?

Also with gpupdate /force.

> Would appreciate any advice.
>
> Thanks,
> Stuart