How to Prevent Changing the Refresh Rate for a Group Policy

You can prevent users from changing the refresh rate for Group Policy objects by restricting complete access to the Group Policy Editor and Registry editing tools. Allowing users to modify the refresh rate to different short time intervals can increase the load on domain controllers. This is not always suitable for a production environment. The Group Policy refresh rate setting can be modified through the Group Policy Editor and the Registry Editor utility. Denying users ability to access these utilities will require basic system modifications. Proceed with caution when making modifications to these utilities.

Instructions

Restrict Group Policy and Registry

1. Log into the system as an administrator. Click "Start," "Administrative Tools" and choose "Active Directory Users and Computers."

2. Right-click the domain you wish to modify and choose "Properties" from the drop-down menu.

   Select the "Group Policy" tab. The "Group Policy Object Links" window will open.

3. Right-click the group of users you wish to prevent from changing the refresh rate. Choose "Edit." The Group Policy console will open.

4. Expand "User Configuration" from the left pane by clicking the corresponding "+" sign.

   A list of sub-folders will display.

5. Expand "Administrative Templates" and "System." A list of settings will display on the right pane. Right-click the "Don't run specified Windows applications" setting, and choose "Properties" from the drop-down menu. A "Properties" window will open.

6. Choose the "Enabled" option. Click "Show." The "Show Contents" window will open.

   Click the "Add" button. The "Add Item" dialog box will open.

7. Type "mmc.exe" in the provided text field, then click "OK." Click the "Add" button again. Type "regedit.exe" in the provided text field and click "OK."

8. Click "OK" on the "Show Contents" window. Click "Apply" and "OK" on the "Properties" window.

Enforce Restrictions

1. Press the "Windows" key and the "R" key simultaneously. The "Run" dialog box will open.

2. Type "cmd" in the provided text field and press "Enter." The "MS DOS" console will open.

3. Type the following command, then press "Enter."

   "secedit /refreshpolicy user_policy /enforce" (without quotations)

4. Type the following command, then press "Enter."

   "secedit /refreshpolicy machine_policy /enforce"

5. Type "exit" and press "Enter." The chosen group of users will not be able to change refresh rate through Group Policy or the Registry Editor.

References

• Technet Microsoft: Periodic Refresh Processing
• Microsoft: How to Restrict Users from Running Specific Windows Programs by Using Group Policy
• Windows Networking: Preventing Group Policy Workarounds