Zasady grupy i ustawienia zabezpieczeń

Group Policy and Security Settings Remember that when you install the Group Policy snap-in on a local computer,
it displays as Local Computer Policy, which contains both Computer
Configuration and User Configuration. In a domain, the Group Policy snap-in
displays as Group Policy, and also has the Computer Configuration and User
Configuration subsections. Domain administrators control Group Policy for the
domain, and Group Policy for the domain overrides Local Computer Policy.
Group Policy updates are dynamic and occur at specific intervals. If there have
been no changes to Group Policy, the client computer still refreshes the security
policy settings at regular intervals for the Group Policy object (GPO).
If no changes are discovered, GPOs are not processed, but security policies are.
For security policies, there is a value that sets a maximum limit of how long a
client can function without reapplying GPOs. By default, this setting is every
16 hours plus the randomized offset of up to 30 minutes. Even when GPOs that
contain security policy settings do not change, the policy is reapplied every 16
hours.
... zobacz całą notatkę