Manual Policy Updates

[Guest Kryten]

Hi,

 

Windows 2003 Server SP2

When I make a change to the domain policy I notice that my two member

servers don't seem to reflect the update in their local security

policy until I reboot them. Then the LSP settings show the new values.

I try running gpupdate /force from the cmd line on these boxes but no

joy.

 

Also I have a number of servers that are standalone, is there any way

to refresh their local security policy after modifying it without

rebooting?

 

Would appreciate any advice.

 

Thanks,

Stuart

[Guest Lanwench [MVP - Exchange]]

Re: Manual Policy Updates

 

Kryten <Kryten68@googlemail.com> wrote:

> Hi,

>

> Windows 2003 Server SP2

> When I make a change to the domain policy I notice that my two member

> servers don't seem to reflect the update in their local security

> policy until I reboot them. Then the LSP settings show the new values.

> I try running gpupdate /force from the cmd line on these boxes but no

> joy.

>

Event logs & the result of an rsop.msc may help...

 

> Also I have a number of servers that are standalone, is there any way

> to refresh their local security policy after modifying it without

> rebooting?

 

What happens if you run gpupdate /force on them?

>

> Would appreciate any advice.

>

> Thanks,

> Stuart

[Guest Meinolf Weber]

Re: Manual Policy Updates

 

Hello Kryten,

 

See inline.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> Hi,

>

> Windows 2003 Server SP2

> When I make a change to the domain policy I notice that my two member

> servers don't seem to reflect the update in their local security

> policy until I reboot them. Then the LSP settings show the new values.

> I try running gpupdate /force from the cmd line on these boxes but no

> joy.

 

Make sure that you only use internal DNS servers on the servers NIC. Also

gpupdate /force will only work if the policy is replicated to all DC's. If

the member servers are "talking" to a DC which does not have the changed

policy yet, well ofcourse no change. Use replmon to replicate manuel in the

domain after changing the policy.

> Also I have a number of servers that are standalone, is there any way

> to refresh their local security policy after modifying it without

> rebooting?

 

Also with gpupdate /force.

> Would appreciate any advice.

>

> Thanks,

> Stuart