JSI Tip 9746. How do I alter the 16 hour security policy refresh that occurs when there are no Group Policy changes?

If there are no changes to group policy, the client computer refreshes security policy setting every 16 hours plus a randomized offset of up to 30 minutes. When this refresh occurs, the Application event log contains:

Event Type: InformationEvent Source: SceCliEvent Category: NoneEvent ID: 1704Date: MM/DD/YYYYTime: HH:MM:SSUser: N/AComputer: Description: Security policy in the Group policy objects are applied successfully.

To alter the default frequency, set the MaxNoGPOListChangesInterval Value Name at HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}.

The default is 0x3c0, 960 minutes (16 hours).

To set the MaxNoGPOListChangesInterval to 7 days, using REG.EXE, built into Windows XP, and Windows Server 2003, or REG.EXE from the Windows 2000 Support Tools on the CD-ROM:

REG ADD "HKLM SOFTWAREMicrosoftWindows NTCurrentVersionWinlogonGPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}" /V MaxNoGPOListChangesInterval /T REG_DWORD /F /D 0x2760

NOTE: See Windows 2000 Group Policy refresh.