JSI Tip 2184. Windows 2000 Group Policy refresh

Windows 2000 Domain Controllers refresh to other Windows 2000 Domain Controllers on 5 minute intervals. Non-DC Windows 2000 computers are refreshed every 90 minutes.

If many WIndows 2000 computers requested a refresh at the same time, significant congestion would occur. To avoid this, a random offset interval is added to the refresh interval, to calclate the the refresh cycle. Windows 2000 domain controllers use a 0 minute offset, while non-DC Windows 2000 computers use 30 minutes. The refresh information for user and computer policies are maintained separately.

You can use the Group Policy to change these settings, or you can use the registry:

        To change the refresh interval for computers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTime
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800 

        To change the offset interval for computers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffset
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440


        To change the refresh interval for domain controllers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeDC
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800


        To change the offset interval for domain controllers:
        Registry key: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffsetDC
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440


        To change the refresh interval for users:
        Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTime
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 64800


        To change the offset interval for users:
        Registry key: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
        Value Name: GroupPolicyRefreshTimeOffset
        Data Type:  REG_DWORD
        Range (in minutes): 0 to 1440

To immediately impose GPO settings upon a target workstation:

            Computer:

                         SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE

            User:

                         SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE