Updating configuration policies manually

Although there are Windows group policy settings that control whether group policies should be refreshed in the background at a set interval, Centrify also provides a command line program to manually refresh group policy settings at any time. This command line program, adgpupdate, forces the adclient daemon to contact Active Directory and collect group policy settings. With the adgpupdate command, you can specify whether you want to refresh computer configuration policies, user configuration policies, or both.

When you run the adgpupdate command, the adclient daemon does the following:

• Contacts Active Directory for computer configuration policies, user configuration policies, or both. By default, adclient collects both computer and user configuration policies.
• Determines all of the configuration settings that apply to the computer, the current user, or both, and retrieves those settings from the System Volume (SYSVOL).
• Writes all of the configuration settings to a virtual registry on the local computer.
• Starts the runmappers program to initiate the mapping of configuration settings using individual mapping programs for user and computer policies.
• Resets the clock for the next refresh interval.

For more information about using the adgpupdate command, see the adgpupdate man page or “Using adgpupdate” in the Administrator’s Guide for Linux and UNIX.