Updating configuration policies manually
Although there are Windows group policy settings that control whether group policies should be refreshed in the background at a set interval, Centrify also provides a command line program to manually refresh group policy settings at any time. This command line program,
adgpupdate, forces the
adclient daemon to contact Active Directory and collect group policy settings. With the
adgpupdate command, you can specify whether you want to refresh computer configuration policies, user configuration policies, or both.
When you run the
adgpupdate command, the
adclient daemon does the following:
- Contacts Active Directory for computer configuration policies, user configuration policies, or both. By default,
adclientcollects both computer and user configuration policies.
- Determines all of the configuration settings that apply to the computer, the current user, or both, and retrieves those settings from the System Volume (
- Writes all of the configuration settings to a virtual registry on the local computer.
- Starts the
runmappersprogram to initiate the mapping of configuration settings using individual mapping programs for user and computer policies.
- Resets the clock for the next refresh interval.
For more information about using the
adgpupdate command, see the
adgpupdate man page or “Using adgpupdate” in the Administrator’s Guide for Linux and UNIX.