Reliabilizing Group Policy

article #1148, updated 19 days ago

In my experience, group policy is the only very nearly absolutely essential tool on a Microsoft domain-controlled LAN which breaks very often and admits of almost zero solid documentation towards fix. A list begins today with two steps towards fix, to be more in the future, Lord willing!

  • Even if there is only one domain controller, change the replication from 180 minutes to 15 minutes. These are in the properties of the site links, in Active Directory Sites and Services, under Inter-Site Transport, under IP. If you have more than one site link enabled, do it for all. Obviously you should moderate carefully, if you are using SMTP or have bandwidth issues.

  • Set services fdPHost and FDResPub as startup Automatic, from Manual.

Categories:   Group Policy   Windows OS-Level Issues