Updating configuration policies manually

Although there are Windows group policy settings that control whether group policies should be refreshed in the background at a set interval, Centrify also provides a UNIX command line program, adgpupdate, to manually refresh group policy settings at any time. With this command, you can specify whether you want to refresh computer configuration policies, user configuration policies, or both.

When you run adgpupdate, the adclient process does the following:

  • Contacts Active Directory for computer configuration policies, user configuration policies, or both. By default, adclient collects both computer and user configuration policies.
  • Determines all of the configuration settings that apply to the computer, the current user, or both, and retrieves those settings from the System Volume (SYSVOL).
  • Writes all of the configuration settings to a virtual registry on the local computer.
  • Starts the runmappers program to initiate the mapping of configuration settings using individual mapping programs for user and computer policies.
  • Resets the clock for the next refresh interval.

For more information about using the adgpupdate command, see the adgpupdate man page.