Synch GP with Primary and Secondary DC

[markus97]

Hello all,

If I make domain group policy changes on the primary dc, how can I replicate these changes right away to the secondary dc? Do I run gpupdate /force on the second dc?

thx

 

[58sniper]

You don't do anything. It happens automatically. There is no such thing as a primary DC.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[markus97]

Does it happen in less than a minute or a bit longer? I have a habbit of calling them primary and secondary, I know I shouldn't.

 

[bustamove]

if you have to do it: you can go to AD sites and services, click on NTDS settings on your "secondary ad", and right click the replication entry from your "primary ad" and select replicate now. but it is not really necessary

you can run gpupdate /force on a workstation to apply the latest GP change from AD

 

[karlisi]

If you update GPO settings on one domain controller, they will replicate to other DC's almost instantly (depends on link speed and replication settings).
As for applying these new settings, domain controllers are checking for changes in GP every 5 minutes, workstations every 90 minutes by default.

===
Karlis
ECDL; MCSA