Refreshing policies

[kruxty]

Hi,

i changed some group policies in my domain controller.
I google it and find secedit command to refressh imediatly the policies but didn't result...

i used:

secedit /refreshpolicies user_policy

whats wrong?

 

[trusted]

Try using the /enforce option with secedit this will usually work.

secedit /refreshpolicy user_policy /enforce

If for some reason it does not work look in the event viewer and post any errors here.

JC

 

[Seaspray0]

Here's why:

User policies only apply to user objects and computer policies apply only to computer objects.

since this is a domain controller you are talking about, only the computer policy will apply to it (the user policy would apply to whomever logs onto it).

You should refresh the computer policy:
secedit /refreshpolicy machine_policy /enforce



A+/MCP/MCSE/MCDBA

 

[Seaspray0]

I missunderstood your original post, but I still bet your answer is how policies can be missunderstood.

Which part of the policy did you edit? user or computer?

Is the object that the change applies to (user or computer) within the OU or subOU the policy applies to?

Did you refresh the correct part of the policy?


Also, some policies (i.e. password policy) must be placed at the domain level.



A+/MCP/MCSE/MCDBA