Tip

Managing GPOs through a GPO - Part 2

James Michael Stewart, Contributor

While it may seem a bit like the chicken and the egg problem, it is possible to control the function of GPOs to a certain extent through a GPO. Controls for GPOs are found in both the Computer Configuration and User Configuration sections within their respective Administrative Templates, System, Group Policy folders.

The controls found in the User Configuration section are as follows:

The Group Policy refresh interval for users control defines the refresh interval for GPOs. It only applies to the User Configuration section of GPOs. The refresh interval includes a defined interval and a randomizer. The defined interval is set to 90 minutes by default and the randomizer has a default maximum value of 30 minutes.

The Group Policy slow link detection control defines the speed at which a connection is considered a slow link.

The Group Policy domain controller selection control defines which domain control the client will contact. Options include the primary domain controller, inherit from Active Directory snap-ins, or any available.

The Create New Group Policy object links disabled by default control determines whether the object links of newly created GPOs are disabled. Once defined and tested, link disabled GPO objects can be easily enabled.

The Default name for New Group Policy objects control defines a default name for newly created GPOs.

The Enforce Show Policies Only control is

Requires Free Membership to View

used to manage whether just actual policy settings are displayed or if recommended settings are shown as well when viewing GPOs.

The Turn off automatic update of ADM files control prevents the automatic update of ADM files when a GPO is opened.

The Disallow Interactive Users from generating Resultant Set of Policy data control is used to restrict access to the RSoP logs.


James Michael Stewart is a partner and researcher for Itinfopros, a technology-focused writing and training organization.


This was first published in January 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.