Windows Forum

Ask something
Discussion Locked

GPO Replication between DCs

0 helpful
9 replies

by thunder_striker

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can one immediately force a replication between two domain controllers after making changes to the group policy and how can this policy be applied immedialtely to all users who are currently logged-in.

9 replies

by bfilmfan

For a Windows 2000 system:

To update the computer policy type

C:\> secedit /refreshpolicy machine_policy

To update the user policy type

C:\> secedit /refreshpolicy user_policy

For a Windows 2003 or XP system:

Gpupdate /target:computer /force

by ewgny

To force a replication between DC's use
AD Sites and Services expand the DC click on NTDS
Settings. In the right pane right click and replicate

by ewgny

One thing you can do if you are editing policies and want to see the results quickly without doing a secedit or gpupdate on each workstation, is to modify the group policy refresh interval.
By Default it is 90 minutes with a 30 min offset.
It can be found both in computer configuration and user configuration under administrative templates - System - Group policy. Now say you change it to 1 minute with a 30 second offset. You will be able to see your group policy modifications very quickly. However you wouldn't want to leave it this way in a production environment for long due to the network congestion it can cause. But it can work well for a test OU for a couple of workstations so you can see the results of your modifications quickly. Since they will refresh quickly, when you are done tweaking Group policy, you can change the refresh interval back to the 90 minutes

by ndhiman

This is just a comment ..What if U had 10 sites..So how do u replicate info from 1 DC to all right away ?

This discussion is closed to new replies.