GPO Security Filtering Using Groups

Question

A GPO was setup with filtering applied to a single group containing computer objects. Is a restart mandatory for all the computer objects listed in the "New Group" for GPO to be applied on them? or is there other way without restart?

http://serverfault.com/questions/159231/is-there-a-way-to-refresh-computer-group-membership-without-rebooting — Greg Askew, Nov 23 '15 at 15:47

joeqwerty · Accepted Answer · 2015-11-23T16:28:35.033

2

Do you mean that you just added the computer accounts to the Security Group you're using in your GPO filter? If so, then the computers need to be rebooted.

edited Nov 23 '15 at 16:28

answered Nov 23 '15 at 15:43

joeqwerty

108,377
6
80
171

score 1 · Answer 2 · answered Nov 23 '15 at 16:14

1

No, while there are ways to get a new Kerberos token with refreshed group membership, a reboot is required for everything to take effect.

answered Nov 23 '15 at 16:14

Jim B

23,938
4
35
58

GPO Security Filtering Using Groups

2 Answers2