|
Posted by Roger Abell [MVP] on March 11, 2006, 11:41 am
Please log in for more thread options
After a change in policy settings the system will begin to use those
at a future time that is based on the type of role the machine has.
On a DC (i.e. for domain accounts in this case) with the default
settings there is a maximum 20 minute delay which consists of
up to 5 minutes for the policy application refresh cycle and of
up to 15 minutes for a maximum 3 hop replication.
On a workstation this is up to 90 minutes for the randomized
policy refresh cycle.
If you want to cause an immediate reapplication of policy use
gpupdate or on Windows 2000 secedit.
gpupdate /? or secedit /? will provide syntax info.
> Every time I change the password policy I need to restart my server so
> that the changes become active.
>
> Isn't there an easier way without restarting the server?
>
> Thanks!
>
> --
> Erick Sasse
| 
XML Sitemap