OU and Group policy replication

  • Thread starter Thread starter Wesley H
  • Start date Start date
W

Wesley H

I am starting to understand GP's a little bit, but what I don't understand
is when you move a user account from one OU to another OU, when does that
get propagated if the user does not log out? I tried it today and used
gpresult.exe to keep checking if the user was indeed in the new OU, and it
seemed that it took a good 2 hours before it too effect. I thought this was
defined in the Default Domain Policy under Administrative
templates/system/group policy\group policy refresh for users, but when I
change that it still takes a long time. Any ideas?

Thanks,
Wes H
 
You can force a group policy to refresh immediately
by using SECEDIT - KB Q227302

Matthew Johnson
(e-mail address removed)
 
I tried to do that, but it doesn't seem to work when you actually change
OUs. If I was in the same OU and changed a security setting and policy the
refresh works immediately, but not when you change OU. Any ideas?

-Wes
 
Hello Wesley,

Please take a look at the following article:
240790 Group Policy to Remove Program May Not Be Applied to Some Users and
http://support.microsoft.com/?id=240790

PS. Although it talks about removing a program, the concept of moving a
user to a new OU is explained.
 
Back
Top