Author: admin
Specify workplace connectivity wait time for policy processing
This policy setting specifies how long Group Policy should wait for workplace connectivity notifications during startup policy processing. If the startup policy processing is synchronous the computer is blocked until workplace connectivity is available or the wait time is reached. If the startup policy processing is asynchronous the computer is not blocked and policy processing will occur in the background. In either case configuring this policy setting overrides any system-computed wait times. If you enable this policy setting Group Policy uses this administratively configured maximum wait time for workplace connectivity and overrides any default or system-computed wait time. If you disable or do not configure this policy setting Group Policy will use the default wait time of 60 seconds on computers running Windows operating systems greater than Windows 7 configured for workplace connectivity.
Configure user Group Policy loopback processing mode
This policy setting directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this setting. It is intended for special-use computers such as those in public places laboratories and classrooms where you must modify the user setting based on the computer that is being used. By default the user’s Group Policy Objects determine which user settings apply. If this setting is enabled then when a user logs on to this computer the computer’s Group Policy Objects determine which set of Group Policy Objects applies. If you enable this setting you can select one of the following modes from the Mode box:”Replace” indicates that the user settings defined in the computer’s Group Policy Objects replace the user settings normally applied to the user. “Merge” indicates that the user settings defined in the computer’s Group Policy Objects and the user settings normally applied to the user are combined. If the settings conflict the user settings in the computer’s Group Policy Objects take precedence over the user’s normal settings. If you disable this setting or do not configure it the user’s Group Policy Objects determines which user settings apply. Note: This setting is effective only when both the computer account and the user account are in at least Windows 2000 domains.
Turn off Resultant Set of Policy logging
This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. RSoP logs information on Group Policy settings that have been applied to the client. This information includes details such as which Group Policy Objects (GPO) were applied where they came from and the client-side extension settings that were included. If you enable this setting RSoP logging is turned off. If you disable or do not configure this setting RSoP logging is turned on. By default RSoP logging is always on. Note: To view the RSoP information logged on a client computer you can use the RSoP snap-in in the Microsoft Management Console (MMC).
Always use local ADM files for Group Policy Object Editor
This policy setting lets you always use local ADM files for the Group Policy snap-in. By default when you edit a Group Policy Object (GPO) using the Group Policy Object Editor snap-in the ADM files are loaded from that GPO into the Group Policy Object Editor snap-in. This allows you to use the same version of the ADM files that were used to create the GPO while editing this GPO. This leads to the following behavior:- If you originally created the GPO with for example an English system the GPO contains English ADM files. – If you later edit the GPO from a different-language system you get the English ADM files as they were in the GPO. You can change this behavior by using this setting. If you enable this setting the Group Policy Object Editor snap-in always uses local ADM files in your %windir% -> inf directory when editing GPOs. This leads to the following behavior:- If you had originally created the GPO with an English system and then you edit the GPO with a Japanese system the Group Policy Object Editor snap-in uses the local Japanese ADM files and you see the text in Japanese under Administrative Templates. If you disable or do not configure this setting the Group Policy Object Editor snap-in always loads all ADM files from the actual GPO. Note: If the ADMs that you require are not all available locally in your %windir% -> inf directory you might not be able to see all the settings that have been configured in the GPO that you are editing.
Create new Group Policy Object links disabled by default
This policy setting allows you to create new Group Policy object links in the disabled state. If you enable this setting you can create all new Group Policy object links in the disabled state by default. After you configure and test the new object links by using a policy compliant Group Policy management tool such as Active Directory Users and Computers or Active Directory Sites and Services you can enable the object links for use on the system. If you disable this setting or do not configure it new Group Policy object links are created in the enabled state. If you do not want them to be effective until they are configured and tested you must disable the object link.
Set default name for new Group Policy objects
This policy setting allows you to set the default display name for new Group Policy objects. This setting allows you to specify the default name for new Group Policy objects created from policy compliant Group Policy Management tools including the Group Policy tab in Active Directory tools and the GPO browser. The display name can contain environment variables and can be a maximum of 255 characters long. If this setting is Disabled or Not Configured the default display name of New Group Policy object is used.
Set Group Policy refresh interval for users
This policy setting specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only for the Group Policies in the User Configuration folder. In addition to background updates Group Policy for users is always updated when users log on. By default user Group Policy is updated in the background every 90 minutes with a random offset of 0 to 30 minutes. If you enable this setting you can specify an update rate from 0 to 64800 minutes (45 days). If you select 0 minutes the computer tries to update user Group Policy every 7 seconds. However because updates might interfere with users’ work and increase network traffic very short update intervals are not appropriate for most installations. If you disable this setting user Group Policy is updated every 90 minutes (the default). To specify that Group Policy for users should never be updated while the computer is in use select the “Turn off background refresh of Group Policy” setting. This setting also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example if you type 30 minutes the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However updates might be delayed significantly. Important: If the “Turn off background refresh of Group Policy” setting is enabled this setting is ignored. Note: This setting establishes the update rate for user Group Policies. To set an update rate for computer Group Policies use the “Group Policy refresh interval for computers” setting (located in Computer Configuration -> Administrative Templates -> System -> Group Policy). Tip: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated the Windows desktop is refreshed; it flickers briefly and closes open menus. Also restrictions imposed by Group Policies such as those that limit the programs a user can run might interfere with tasks in progress.
Set Group Policy refresh interval for domain controllers
This policy setting specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in addition to updates performed when the system starts. By default Group Policy on the domain controllers is updated every five minutes. If you enable this setting you can specify an update rate from 0 to 64800 minutes (45 days). If you select 0 minutes the domain controller tries to update Group Policy every 7 seconds. However because updates might interfere with users’ work and increase network traffic very short update intervals are not appropriate for most installations. If you disable or do not configure this setting the domain controller updates Group Policy every 5 minutes (the default). To specify that Group Policies for users should never be updated while the computer is in use select the “Turn off background refresh of Group Policy” setting. This setting also lets you specify how much the actual update interval varies. To prevent domain controllers with the same update interval from requesting updates simultaneously the system varies the update interval for each controller by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example if you type 30 minutes the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that update requests overlap. However updates might be delayed significantly. Note: This setting is used only when you are establishing policy for a domain site organizational unit (OU) or customized group. If you are establishing policy for a local computer only the system ignores this setting.
Set Group Policy refresh interval for computers
This policy setting specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate only for Group Policies in the Computer Configuration folder. In addition to background updates Group Policy for the computer is always updated when the system starts. By default computer Group Policy is updated in the background every 90 minutes with a random offset of 0 to 30 minutes. If you enable this setting you can specify an update rate from 0 to 64800 minutes (45 days). If you select 0 minutes the computer tries to update Group Policy every 7 seconds. However because updates might interfere with users’ work and increase network traffic very short update intervals are not appropriate for most installations. If you disable this setting Group Policy is updated every 90 minutes (the default). To specify that Group Policy should never be updated while the computer is in use select the “Turn off background refresh of Group Policy” policy. The Set Group Policy refresh interval for computers policy also lets you specify how much the actual update interval varies. To prevent clients with the same update interval from requesting updates simultaneously the system varies the update interval for each client by a random number of minutes. The number you type in the random time box sets the upper limit for the range of variance. For example if you type 30 minutes the system selects a variance of 0 to 30 minutes. Typing a large number establishes a broad range and makes it less likely that client requests overlap. However updates might be delayed significantly. This setting establishes the update rate for computer Group Policy. To set an update rate for user policies use the “Set Group Policy refresh interval for users” setting (located in User Configuration -> Administrative Templates -> System -> Group Policy). This setting is only used when the “Turn off background refresh of Group Policy” setting is not enabled. Note: Consider notifying users that their policy is updated periodically so that they recognize the signs of a policy update. When Group Policy is updated the Windows desktop is refreshed; it flickers briefly and closes open menus. Also restrictions imposed by Group Policies such as those that limit the programs users can run might interfere with tasks in progress.
Configure Group Policy slow link detection
This policy setting defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a policy update to the computers in this group is slower than the rate specified by this setting the system considers the connection to be slow. The system’s response to a slow policy connection varies among policies. The program implementing the policy can specify the response to a slow link. Also the policy processing settings in this folder lets you override the programs’ specified responses to slow links. If you enable this setting you can in the “Connection speed” box type a decimal number between 0 and 4294967200 indicating a transfer rate in kilobits per second. Any connection slower than this rate is considered to be slow. If you type 0 all connections are considered to be fast. If you disable this setting or do not configure it the system uses the default value of 500 kilobits per second. This setting appears in the Computer Configuration and User Configuration folders. The setting in Computer Configuration defines a slow link for policies in the Computer Configuration folder. The setting in User Configuration defines a slow link for settings in the User Configuration folder. Also see the “Do not detect slow network connections” and related policies in Computer Configuration -> Administrative Templates -> System -> User Profile. Note: If the profile server has IP connectivity the connection speed setting is used. If the profile server does not have IP connectivity the SMB timing is used.