UCF STIG Viewer Logo

The system is configured to prevent background refresh of Group Policy.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3469 3.080 SV-29605r2_rule ECSC-1 Medium
Description
If this setting is enabled, then Group Policy settings are not refreshed while a user is currently logged on. This could lead to instances when a user does not have the latest changes to a policy applied and is therefore operating in an insecure context.
STIG Date
Windows 2003 Domain Controller Security Technical Implementation Guide 2015-06-23

Details

Check Text ( None )
None
Fix Text (F-5684r1_fix)
Configure the system to require Group Policy background refresh by setting the policy value for Computer Configuration -> Administrative Templates -> System -> Group Policy “Turn Off Background Refresh of Group Policy” to “Disabled”.