Optional Processing of Group Policy Even If It Has Not Changed
To achieve the highest level of policy settings security, activate the Process Even If The Group Policy Objects Have Not Changed policy for each of the Group Policy client-side extensions that require it. These policy settings are located in the Computer Configuration node, under Administrative Templates, System, Group Policy. Each client-side extension has a policy setting for controlling the policy processing. By default, each Group Policy client-side extension updates its policy settings only when they have changed. Choosing this option ensures that the selected settings are applied at every logon session to Active Directory, but forgoes the performance optimization achieved by skipping the application of policy settings when they have not changed. For information about Windows 2000 security, see the chapters under "Distributed Security" in this book.