group policy over dialup

[jacksneed2000]

I have a question I cannot seem to find an answer on. I have some
traveling users that connect to the network via dialup or VPN. I don't
have slow wan connections defined, so the 500K default should be in
effect. Last week I was told a new group policy that was deployed that
locked down the Remote Access Connection Manager service, which caused
all users that were not local admins of their laptops to no longer
allowed to use VPN. To work around the problem, these users were made
local admins of their laptops temporarily.

Since then, I have found and modified the setting in group policy to
fix the problem, but now my concern is will these remote users receive
the group policy update when they connect via dialup or VPN? From what
I am reading, I think they will get the group policy only if they
"logon using dialup connection" at the control-alt-del screen. If this
is true, and if they do not use the "logon using dialup connection"
option, can I still have them connect as normal with dialup or VPN,
then run "gpupdate/force" to receive the updated group policy? Will
that work?

 

[jacksneed2000]

BTW, forogot to mention the clients are mostly all windows XP, and the
domain is Windows 2003 AD.

 

[jacksneed2000]

BTW, forogot to mention the clients are mostly all windows XP, and the
domain is Windows 2003 AD.

 

[Darren Mar-Elia]

GP will process in the background, even on a VPN connection, if it can reach
a DC. This means that while you won't get foreground GP processing you will
continue to get periodic background processing occurring as long as the VPN
is up. Note that some policy won't actually run unless a foreground event
(machine startup or user logon) occurs, but stuff like security and admin.
template policy will run as expected.


--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Whitepapers and Utilities for all things Group Policy-related
Just Released! The new Windows Group Policy Guide from Microsoft Press!!!
Check it out at http://www.microsoft.com/mspress/books/8763.asp

 

[jacksneed2000]

Perfect. That's exactly what I needed to know. Thanks.