You must ensure Group Policy changes apply to computers in the Finance OU within 15 minutes while users are logged on. Which setting should you configure to shorten the refresh cycle?
-
AEnable background refresh using the default interval
-
BEnable asynchronous Group Policy application settings
-
CEnable and configure the Group Policy refresh interval for domain controllers
-
DEnable and configure the Group Policy refresh interval for computers
-
ENone of above
Answer
Correct Answer: Enable and configure the Group Policy refresh interval for computers
Explanation
Introduction / Context: By default, Windows 2000 clients process Group Policy at startup and periodically in the background (every 90 minutes with a random offset). If you require rapid propagation—such as within 15 minutes—you must explicitly configure the computer refresh interval in policy. This question distinguishes between DC refresh (for policy on controllers) and client computer refresh (which affects the targeted OU’s machines).
Given Data / Assumptions:
- Computers reside in the Finance OU.
- Users may remain logged on; background refresh must pick up changes.
- Desired maximum delay: 15 minutes.
Concept / Approach: Edit the applicable Group Policy Object and set Computer Configuration → Administrative Templates → System → Group Policy → Group Policy refresh interval for computers. Specify 15 minutes (and optionally a small random offset). This ensures computers in scope will reapply policy at the new interval even while logged on. Domain controller refresh interval does not apply to client computers in the OU; “asynchronous application” impacts processing behavior, not interval length.
Step-by-Step Solution:
Open GPMC/Group Policy Editor on the Finance OU’s GPO.Navigate to the computer refresh interval setting and enable it.Set the interval to 15 minutes and choose a small random offset.Force a gpupdate /target:computer if using later OS, or wait for interval on Windows 2000.Verification / Alternative check: Check the event logs or use Resultant Set of Policy (RSoP) to confirm the setting is applied; observe that changes appear within the expected 15-minute window thereafter.
Why Other Options Are Wrong:
- Default background refresh: remains at 90 minutes by default.
- Asynchronous settings: do not reduce the interval.
- Domain controller refresh: affects DCs only, not clients in Finance OU.
- None of above: incorrect because configuring the computer refresh interval is correct.
Common Pitfalls: Editing the wrong GPO scope; setting the user refresh interval instead of computer; forgetting that Windows 2000 lacks gpupdate and relies on background refresh or reboot/logon for immediate enforcement.
Final Answer: Enable and configure the Group Policy refresh interval for computers.