Original subtitles

It's important to understand how group policies apply on client computers.

The steps are as follows.

First when a group policy refresh begins a service that is run on all on all Windows based computers

known as group the client service in Windows Vista and later and Windows 2000 and later.

So this service determines which GPO always applied to the computer or user.

Second the Group Policy client service downloads and AGP oes that are not cached already.

So alt. group policy client side extensions interpret the settings in G.P.O. and make appropriate changes

to the local computer or to the currently signed user whether are client site extensions for each major

category of Wallaces set in for example there is a security client site extension that apply security

changes at client side extension that executor's start up and log on scripts as see as is that install

software and client side extension that makes changes to registry keys and well use each Windows operating

system version.

Has that client side extensions to extend the functional reach of group always.

And there are several dozen blindsides extensions in Windows operating systems.

One of the more important concepts to remember about group policy is that it is a client driven or group

policy client service tools GPO is from the domain triggering the client side extensions to licet and

slow going group policy is not a push technology.

You can see the installed client side extensions on a computer by allocating their appropriate registry

key.

It is located in HK a local machine.

Microsoft Windows and the current version of Venlo gone GP extensions key.

You can configure the behavior of client side extensions by use and grow bolas.

Most client side extensions apply said Encina GPO only if the GPO has changed this behavior improve

the overall policy process by eliminating redundant applications or the same settings.

Most policies apply in such a way that standard users can change the set on their computer they always

will be subject to the configuration forth by group policy.

However a standard user can change some settings and a user can change many settings if that user is

an administrator on the system.

If users in your environment are administrators on their computers you should consider configure and

blindsight extensions to reapply policy settings even if the GPO has not changed.

That way if an administrative user changes the configuration so that it is no longer compliant with

policy the configuration will be receptive to its compliance date as the next group policy refresh to

configure such blindsight extensions to reply Posa said.

You can do that by configure in a GPO scoped to computers and then defining the settings in the computer

configuration boluses administrative templates system group policy note for each client side extension

that you want to configure.

Open its policy process and policy set and such as registry policy process and for the registry CSC

click enabled and then select the row cells.

Even if the group policy objects have no changed checkbox No the security co-incide the extension manager

is an important exception to the default post-process and certains the security client side extension

re-applied security settings every 16 hours.

Even if it G.P.O. hasn't changed.

As a note here enable the all this way for network at start up and log on.

All this is set in for all Windows based clients without the set and by default Windows XP and later

clients perform refreshes asynchronously.

The user psilocin to use and cached credentials.

The benefit is that the desktop is quicker to display and user can start Vark without waiting for group

policy to apply.

This means that when the client computer starts up and the user signs in they do not receive the latest.

Well this is from the domain group also will perform a refresh in the background after the user assigns

them.

So this is located in computer configuration boluses administrative templates system.

All are gone.

Be sure to read the policy settings.

Explanatory text.

The set changes the group policy process into synchronous mode which might make procession slower but

it ensures a more consistent environment.

So it's about policy refresh policy settings and computer configuration note apply it system start up

and learn every 90 to 120 minutes thereafter boluses said in a user configuration node apply it sign

in and then every 90 to 120 minutes thereafter.

The application of all is this is called Group Policy refresh the refresh that you are at system startup

up and to use or sign in is also referred to as foreground to refresh the periodic refresh that occurs

every 90 to 120 minutes and manual refreshes are both referred to as background refreshes some client

side extensions and they apply settings during foreground process.

And of course you can always force a policy refresh by using the GP update command.