You must ensure Group Policy changes apply to computers in the Finance OU within 15 minutes while users are logged on. Which setting should you configure to shorten the refresh cycle?

Introduction / Context:
By default, Windows 2000 clients process Group Policy at startup and periodically in the background (every 90 minutes with a random offset). If you require rapid propagation—such as within 15 minutes—you must explicitly configure the computer refresh interval in policy. This question distinguishes between DC refresh (for policy on controllers) and client computer refresh (which affects the targeted OU’s machines).

Given Data / Assumptions:

• Computers reside in the Finance OU.
• Users may remain logged on; background refresh must pick up changes.
• Desired maximum delay: 15 minutes.

Concept / Approach:
Edit the applicable Group Policy Object and set Computer Configuration → Administrative Templates → System → Group Policy → Group Policy refresh interval for computers. Specify 15 minutes (and optionally a small random offset). This ensures computers in scope will reapply policy at the new interval even while logged on. Domain controller refresh interval does not apply to client computers in the OU; “asynchronous application” impacts processing behavior, not interval length.

Step-by-Step Solution:

Verification / Alternative check:
Check the event logs or use Resultant Set of Policy (RSoP) to confirm the setting is applied; observe that changes appear within the expected 15-minute window thereafter.

Why Other Options Are Wrong:

• Default background refresh: remains at 90 minutes by default.
• Asynchronous settings: do not reduce the interval.
• Domain controller refresh: affects DCs only, not clients in Finance OU.
• None of above: incorrect because configuring the computer refresh interval is correct.

Common Pitfalls:
Editing the wrong GPO scope; setting the user refresh interval instead of computer; forgetting that Windows 2000 lacks gpupdate and relies on background refresh or reboot/logon for immediate enforcement.

Final Answer:
Enable and configure the Group Policy refresh interval for computers.