Chapter 3: Group Policy Processing Behavior Essentials

After you create or modify a GPO in the domain, the policy’s “wishes” are not immediately dropped on the target machines. In fact, they’re not dropped on the target machines at all; they’re requested by the client computer at various times throughout the day. GPOs are processed at specific times, based on various conditions. You could basically say that GPOs are created from your management machine, and plopped on the Domain Controllers for storage. Then those GPOs are simply “pulled” by the client.

It’s likely that you have all sorts of client systems, including Windows 7, in your environment. And, again, when I say “client system” I mean “the client that receives Group Policy”—even if ...

Get Group Policy: Fundamentals, Security, and the Managed Desktop now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.