Detections
Analytics

4.10.19.2 (L1) Ensure 'Turn off background refresh of Group Policy' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting prevents Group Policy from being updated while the computer is in use. This policy setting applies to Group Policy for computers, users and Domain Controllers.

The recommended state for this setting is: Disabled

This setting ensures that group policy changes take effect more quickly, as compared to waiting until the next user logon or system restart.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled

Administrative Templates\System\Group Policy\Turn off background refresh of Group

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/21767

Item Details

References: CSCv7|5.4

Plugin: Windows

Control ID: 20de1429663034c8e362223e9c40a214c4e84c7b5eabcfae9881d1772eda596f