Refresh GP

[rhory97]

Hello, we recently went to AD so please bare with me... Here is the question, we created a GP for XP computers to set the Windows firewall settings, but screwed up the subnet mask. I then went into the GP and corrected the mistake. I thought you would just have to reboot or do a gpudate /force for the new setting to take place? But this does not seem to be the case. Since the GP still exists does the computer realize that the info within the GP has changed? Do we need to delete the GP then create a new GP with the corrected info?

Any help would be very much appreciated.

Thanks Terry.

[AndyKing]

If the domain controller being queried by a computer has an updated policy when the computer processes its policy, the computer will get the updated policy. A reboot or gpupdate /force will both trigger policy processing to take place.

You may have updated the policy on DC A. Then rebooted a computer that is querying DC B for it's policy. If the policy changes have not yet replicated between the DC's the updated policy will not have taken effect.

You do not need to delete/recreate the policy... you just need to wait for the policy to replicate - or force policy replication on your servers before the computers will process the policy changes.

[rhory97]

Thanks, I was just to impatient.