Updating configuration policies manually
Although there are Windows group policy settings that control whether group policies should be refreshed in the background at a set interval, Centrify also provides a command line program to manually refresh group policy settings at any time. This command line program, adgpupdate
, forces the adclient
daemon to contact Active Directory and collect group policy settings. With the adgpupdate
command, you can specify whether you want to refresh computer configuration policies, user configuration policies, or both.
When you run the adgpupdate
command, the adclient
daemon does the following:
- Contacts Active Directory for computer configuration policies, user configuration policies, or both. By default,
adclient
collects both computer and user configuration policies. - Determines all of the configuration settings that apply to the computer, the current user, or both, and retrieves those settings from the System Volume (
SYSVOL
). - Writes all of the configuration settings to a virtual registry on the local computer.
- Starts the
runmappers
program to initiate the mapping of configuration settings using individual mapping programs for user and computer policies. - Resets the clock for the next refresh interval.
For more information about using the adgpupdate
command, see the adgpupdate
man page or “Using adgpupdate” in the Administrator’s Guide for Linux and UNIX.