Home / server / Questions / 291056
In Process
Grace
Asked: 2011-07-17 10:47:20 +0800 CST

I need a tool that could help verify replication timing of GPO

  • 772

I have created a domain level GPO that causes the message "Logon is prohibited to unauthorized personnel" to be presented to users when logging on.

I need to modify the GPO such that the domain controller group policy replication is set to occur every 15 minutes and computer group policy replication to occur once every 3 hours.

Could someone tell me a tool I need that could help me verify replication timing? Also it would be nice if someone could show me how to set it up as well.

group-policy

2 Answers

  1. AD (NTDS) replication is controlled within the AD Sites and Services management console (dssite.msc). You can modify the site links and NTDS settings within there.

    For modifying how often clients refresh their policy, you should use Group Policy. Navigate to Computer Configuration > Policies > Administrative Templates > System > Group Policy, and change the Group Policy Refresh Interval settings.

    • 2

  2. You can use the tool repadmin to inspect connections between AD domain controllers:

    You can use Repadmin.exe to view the replication topology, as seen from the perspective of each domain controller. In addition, you can use Repadmin.exe to manually create the replication topology, to force replication events between domain controllers, and to view both the replication metadata and up-to-dateness vectors (UTDVECs). You can also use Repadmin.exe to monitor the relative health of an Active Directory Domain Services (AD DS) forest.

    For investigating a specific client, you can use gpresult to learn about:

    • When Group Policy was last applied
    • The domain controller which applied Group Policy
    • Information on all GPOs that are applied, and details for these
    • Information on the Registry settings that are applied, and details for these
    • Scripts
    • Software management information and details on published and assigned applications
    • Disk quota information
    • Internet Protocol (IP) security settings
    • Redirected folder information, and details on these.
    • 2