none
Is there cache for GPO?

    Question

  • As my understanding, when two GPO conflict, PC will apply the last one. Such as if a policy enable in local group policy, and then a same policy enable by GPO, then the PC will apply the GPO policy.

    My situation is, I enable policy: computer configuration->administrative template->network->BITS->limit the maximum network bandwidth for BITS bandground transfer via local group policy, and apply the same through GPO. (two policy difference is the work hour). It seems only local policy is working, even I run gpupdate/force and restart PC.

    hence I am wondering in my situation, how long the GPO will override the local group policy?

    If prossible it cause by GPO cache, how to clear it?

    BTW, how to check the BITS limit policy is working?

    thanks in advance.


    Monday, December 07, 2015 2:40 PM

Answers

All replies

  • Hi,
     
    Am 07.12.2015 um 15:40 schrieb GerrYHF:
    > If prossible it cause by GPO cache, how to clear it?
     
    There is no cache. Policies are written to system. Thats it.
     
    There is a version stored for every GPobject and usually the system only
    applies changed objects.
    There is NO NEAD! to apply GPOs every single our by "force".
     
    The settings are done once and thats absolutly enough, because as long
    there is no change in any object the system never has a need to write
    the settings again.
     
    If there is a change, lets say in the first object of your GPOs (the
    local GPO), then the systems is adviced to process the complete chain of
    objects (CSEs and their DLLs) again to get the right state of settings.
     
    Doing a "/force" just reapplies all settings no matter of the version.
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Monday, December 07, 2015 3:10 PM
  • How to identify which GPO is taking effect?

    if i can found the GPO form RSOP,  is that mean this GPO already took effect to this machine?

    Tuesday, December 08, 2015 8:23 AM
  • RSOP will display you the GPO objects effecting and any local policy effecting, if used any. Saying that, with GPMC RSOP you will see, if the setting is set with domain GPO or Local Policy.
    Tuesday, December 08, 2015 8:48 AM
  • Hi,
     
    Am 08.12.2015 um 09:23 schrieb GerrYHF:
    > How to identify which GPO is taking effect?
     
    RSoP or GPMC -> Group Policy Result.
     
    Both will tell which setting comes from which GP
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Tuesday, December 08, 2015 11:01 AM
  • May I make you confusing, I would like to know How to prove the GPO already apply to the machine?

    If I can find the GPO which I deployed from RSOP or gpresult /h of PC client, can I assume the GPO already applied and taking effect?

    thanks.

    Wednesday, December 09, 2015 2:56 PM
  • Hi,
     
    Am 09.12.2015 um 15:56 schrieb GerrYHF:
    > If I can find the GPO which I deployed from RSOP or gpresult /h of PC
    > client, can I assume the GPO already applied and taking effect?
     
    If the entry does state "filtered" or "access denied", yes, than the GP
    was applied.
    The list is not a "what I should do in the future list"
     
    Mark
    --
    Mark Heitbrink - MVP Windows Server - Group Policy
     
    GPO Tool: http://www.reg2xml.com - Registry Export File Converter
     
    Wednesday, December 09, 2015 4:03 PM