Clients Storing GPO Information

[Joe]

So basically we have a Windows 2003 Domain Controller, and all Windows XP
machines. With the exception of a few Win2k machines.

All I really need/want to be able to do is have all my clients ALWAYS refer
to the domain controllers and not store any GPO information locally, only so
I can ensure that all the policies are being applied properly and each time
a computer is booted up.

What I am looking for is a switch on the client that tells it not to cache
any domain controller GPO policy stuff.

Any way to do this?

Joe

[Matjaz Ladava [MVP]]

Don't know what you mean, but GPO's when aplied on the client are stored in
client registry. they are not cached or anything like this. Is there any
problem you are experiencing with your policies ?
--
Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory

Post by Joe
So basically we have a Windows 2003 Domain Controller, and all Windows XP
machines. With the exception of a few Win2k machines.
All I really need/want to be able to do is have all my clients ALWAYS refer
to the domain controllers and not store any GPO information locally, only so
I can ensure that all the policies are being applied properly and each time
a computer is booted up.
What I am looking for is a switch on the client that tells it not to cache
any domain controller GPO policy stuff.
Any way to do this?
Joe

[Derek Melber [MVP]]

Joe,

GPOS don't work like this. They always apply the Local-site-domain-OU GPOs.
So, if you don't want any Local to apply, you need the SDOU GPOs to
overwrite any and all Locally set GPOs.

As for caching, GPO settings modify the Registry and system configurations.
Most of these are flushed when the user logs off and the computer is
shutdown/restarted.
--
Derek Melber
BrainCore.Net

Post by Joe
So basically we have a Windows 2003 Domain Controller, and all Windows XP
machines. With the exception of a few Win2k machines.
All I really need/want to be able to do is have all my clients ALWAYS refer
to the domain controllers and not store any GPO information locally, only so
I can ensure that all the policies are being applied properly and each time
a computer is booted up.
What I am looking for is a switch on the client that tells it not to cache
any domain controller GPO policy stuff.
Any way to do this?
Joe