Chapter 3. Group Policy Processing Behavior Essentials

After you create or modify a GPO in the domain, the policy's "wishes" are not immediately dropped on the target machines. In fact, they're not dropped on the target machines at all; they're requested by the client computer at various times throughout the day. GPOs are processed at specific times, based on various conditions. You could basically say that GPOs are created from your management machine, and plopped on the Domain Controllers for storage. Then those GPOs are simply "pulled" by the client.

It's likely that you have all sorts of client systems, including Windows 7, in your environment. And, again, when I say "client system" I mean "the client that receives Group Policy"—even if it's ...

Get Group Policy: Fundamentals, Security, and the Managed Desktop now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.