組策略的應(yīng)用(二)組策略的刷新時(shí)間2008-12-29 08:47:38
標(biāo)簽:
組策略WindowsXP [
推送到技術(shù)圈]
Are your Windows XP machines having trouble receiving Group Policy updates during working hours? If so, you may need to adjust the refresh interval. Read this tip to learn how to change the refresh interval for Group Policy's User Configuration and Computer Configuration settings. 概述:
If you're troubleshooting a Windows XP system that is encountering problems receiving Group Policy updates during working hours, you may want to adjust the Group Policy refresh interval.
如果您正為WindowsXP系統(tǒng)的在工作時(shí)間內(nèi)接收組策略更新的問(wèn)題而苦惱,您可以調(diào)整組策略刷新時(shí)間間隔。
By default, the refresh interval is set to 90 minutes on all Windows XP systems. This means that many clients could be requesting policy updates at the same time, and the server could be getting overloaded with simultaneous requests. Therefore, the system in question my not be able to receive Group Policy updates.
所有的Windows XP系統(tǒng)在默認(rèn)情況下,刷新時(shí)間間隔被設(shè)為90分鐘。這意味著一些客戶端可能同時(shí)被要求組策略更新,并且服務(wù)器可能因?yàn)檫@些同時(shí)發(fā)生的請(qǐng)求而超載。因此,系統(tǒng)將不能接收組策略更新。
However, you can reset the refresh interval to any value between 0 and 64,800 minutes (45 days). In addition, you can set an interval offset, which further randomizes the refresh period to any value between 0 and 1,440 minutes (24 hours).
然而,你可以重新設(shè)置介于0到64,800分鐘(45天)之間的刷新時(shí)間間隔值。而且,你可以設(shè)置一個(gè)時(shí)間間隔偏差,其取值為0到1,440分鐘(24小時(shí)),可使刷新周期更隨機(jī)。
You'll want to change the refresh interval for both the User Configuration and Computer Configuration settings. Since the instructions for each are identical, we'll combine the names as Computer/User Configuration in our steps.
你將要改變用戶配置和計(jì)算機(jī)配置的刷新時(shí)間間隔。因?yàn)閮烧叩闹噶钍峭瑯拥?,在我們的操作步驟中將把計(jì)算機(jī)/用戶配置名合起來(lái)。
Here's how to adjust the refresh interval:
這是調(diào)整刷新時(shí)間間隔的步驟:
Launch the Group Policy console (Gpedit.msc).
打開“組策略”控制臺(tái)(開始-->運(yùn)行...,輸入:Gpedit.msc,確定。) Go to Computer/User Configuration, expand Administrative Templates, expand System, and click Group Policy.
計(jì)算機(jī)/用戶配置-->管理模板-->系統(tǒng)-->組策略。 Locate and double-click the Group Policy Refresh Interval For Computers/Users. 找到并雙擊計(jì)算機(jī)/用戶的組策略刷新間隔。 Select the Enabled option button.
選定“啟用”單選按鈕。 Use the spin buttons to set the Minutes value for the refresh interval.
設(shè)置用戶的組策略刷新間隔分鐘值。 Use the spin buttons to set the Minutes value for the refresh offset.
設(shè)置用戶的組策略刷新間隔的隨機(jī)時(shí)間分鐘值。 Click OK and then exit the Group Policy console.
點(diǎn)擊“確定”按鈕并關(guān)閉“組策略”控制臺(tái)。
endurer補(bǔ):
強(qiáng)制組策略更新
組策略會(huì)通過(guò)活動(dòng)目錄周期性的被更新,默認(rèn)的設(shè)置會(huì)每90分鐘更新一次工作站的組策略設(shè)置。
要強(qiáng)制組策略立刻在本機(jī)更新可以使用命令行工具gpupdate.exe。輸入gpupdate /?將會(huì)看到該命令所有可用的參數(shù)。例如,要強(qiáng)制立刻刷新計(jì)算機(jī)配置這部分的組策略設(shè)置,可以使用:
或許有人天真的想,我的客戶端機(jī)器,只要不注銷,不重啟,任你管理員如何去修改組策略,影響不到我,與我無(wú)關(guān)。這是天真的想法,也是很自然的疑問(wèn)。要解答這個(gè)疑問(wèn),就要引入一個(gè)新的機(jī)制,組策略刷新時(shí)間。本質(zhì)上,不管你不重啟不注銷也不關(guān)機(jī),浪費(fèi)公司的電,刷新時(shí)間到了,你還是得去應(yīng)用組策略設(shè)置,魔高一尺,道高一丈,大家都玩的很開心。
1、對(duì)于域控,五分鐘是一個(gè)刷新周期,這讓我聯(lián)想到了默認(rèn)域控策略,但新策略還是用新GPO,因?yàn)槟愕哪J(rèn)域控策略掛了,你可以使用dcgpofix恢復(fù)初始狀態(tài),但你另加的設(shè)置就沒(méi)了,分隔開來(lái),就不存在這種問(wèn)題了;
2、對(duì)于客戶端或是成員服務(wù)器,默認(rèn)是90分鐘,也就是一個(gè)半鐘,考慮到實(shí)際環(huán)境,這個(gè)時(shí)間有30分鐘的增長(zhǎng),也就是一個(gè)半鐘到兩個(gè)鐘,而所謂的實(shí)際環(huán)境也就是如果此時(shí)DC繁忙,客戶端可以排排隊(duì)等等,我們?nèi)ャy行總是這樣,弄丟了卡本來(lái)就不爽,還要填單排隊(duì),更不爽,去銀行你就不要指望準(zhǔn)時(shí)出來(lái);
3、前面兩點(diǎn)沒(méi)什么說(shuō)的,很多地方都有所述,但是如果沒(méi)有策略更新,客戶端同樣要在16個(gè)小時(shí)拿一次更新,這點(diǎn)似乎對(duì)成員服務(wù)器更有效,因?yàn)榭蛻舳斯ぷ?6個(gè)小時(shí)的話,早就怨聲載道了,服務(wù)器就不一樣了,我們要求它7X24,人們都說(shuō)身嬌肉貴,服務(wù)器恰恰相反,身價(jià)不低,但卻是勞碌命,什么時(shí)候掛了,什么休息下,此時(shí)或許要落得個(gè)開膛破肚的下場(chǎng);
本文出自 51CTO.COM技術(shù)博客