Windows policy refresh

In addition, Group Policy is periodically refreshed. By default, this periodic refresh is performed every 90 minutes with a randomized offset of up to 30 minutes.

Membership in Administrators , or equivalent, is the minimum required to complete this procedure. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. By using our site, you agree to our cookie policy. Cookie Settings. Learn why people trust wikiHow.

Download Article Explore this Article Steps. Tips and Warnings. Related Articles. Author Info Last Updated: July 3, Run a command prompt as an administrator. To do this, right-click and select run as administrator. A new window will display the console. Wait a moment. Group Policy changes will be updated.

The console displays:. This will restart your computer and update the changes. Include your email address to get a message when this question is answered.

To update the group policy you need access to the system administrator account. There is some really good content on your site, so thank you. Regarding the above, it seems a little limiting to re-apply the settings again specifically for settings that may have been defined at device enrolment set the users Timezone as an example but without the ability for these to be overridden by the user thereafter. The timezone is just one example that springs to mind, however I expect there are other user initiated actions that will occur during the life-cycle of the device that will make the device unusable if settings keep getting reverted.

Hi Tom, I agree, it would be easy to have more control on when and how settings apply. For now the only way to play with this is with dynamic targeting were possible.

For product suggestions make sure to drop them at the Intune User Voice. Hi Sanitha, It can trigger the scheduled task number 3, or run a command line as configured in task number 3.

I have events with 0x25,0x26 and 0xF values and am trying to work out what they are. Hi Craig, I simply performed and triggered the different actions and verified the behavior in the Event Viewer. What I am seeing is that not all policies get refreshed on device check-in. Firewall settings for example. I have an Endpoint Security policy that enables the firewall for all 3 network profiles Domain, Private and Public.

An administrator is able to turn off the firewall for any or all of the network profiles, but when the device check-in happens, the firewall is not re-enabled for the network profile.

Of course that can change in the future. Notify me of follow-up comments by email. Notify me of new posts by email. This site uses Akismet to reduce spam. Learn how your comment data is processed. Home Scripts Archive Contact About.

I would like to differentiate between the following three different type of device check-in triggers: A notification — The check-in can be triggered by a notification from Microsoft Intune.

A scheduled check-in — The check-in can be triggered by a scheduled task. A manual check-in — The check-in can be triggered manually by the user. Scheduled device check-ins The scheduled device check-ins are more clear. Frequency of scheduled device check-ins Once a Windows 10 device is enrolled in Microsoft Intune, three different scheduled tasks will be used to trigger the compliance and configuration check-ins.

Figure 1: Schedule 3 — Trigger. This device check-in action will also refresh the already applied Policy CSP settings. Figure 1: Schedule 3 — Action. During the device check-in the omadmclient. Figure 3: Manual trigger.