While it may seem a bit like the chicken and the egg problem, it is possible to control the function of GPOs to a certain extent through a GPO. Controls for GPOs are found in both the Computer Configuration and User Configuration sections within their respective Administrative Templates, System, Group Policy folders.
The controls found in the User Configuration section are as follows:
The Group Policy refresh interval for users control defines the refresh interval for GPOs. It only applies to the User Configuration section of GPOs. The refresh interval includes a defined interval and a randomizer. The defined interval is set to 90 minutes by default and the randomizer has a default maximum value of 30 minutes.
The Group Policy slow link detection control defines the speed at which a connection is considered a slow link.
The Group Policy domain controller selection control defines which domain control the client will contact. Options include the primary domain controller, inherit from Active Directory snap-ins, or any available.
The Create New Group Policy object links disabled by default control determines whether the object links of newly created GPOs are disabled. Once defined and tested, link disabled GPO objects can be easily enabled.
The Default name for New Group Policy objects control defines a default name for newly created GPOs.
The Enforce Show Policies Only control is
The Turn off automatic update of ADM files control prevents the automatic update of ADM files when a GPO is opened.
The Disallow Interactive Users from generating Resultant Set of Policy data control is used to restrict access to the RSoP logs.
James Michael Stewart is a partner and researcher for Itinfopros, a technology-focused writing and training organization.
This was first published in January 2003