1 00:00:03,080 --> 00:00:07,130 So let's move on and talk about the different types of processing. 2 00:00:07,940 --> 00:00:12,170 There really are two different ways that group policy is processed at the client. 3 00:00:13,130 --> 00:00:15,770 The first way is called foreground processing. 4 00:00:16,610 --> 00:00:16,940 What? 5 00:00:16,940 --> 00:00:21,440 This is the processing that occurs at computer startup for computer objects. 6 00:00:21,470 --> 00:00:24,860 So when the computer first boots up, it connects to the network. 7 00:00:25,720 --> 00:00:30,280 It connects to Active Directory and it performs group policy processing for the computer. 8 00:00:30,280 --> 00:00:37,630 And then at user log on for user objects and AD, there's a foreground processing cycle that occurs 9 00:00:38,500 --> 00:00:43,750 and I'll talk about why the group policy engine distinguishes between these kinds of processing cycles 10 00:00:43,750 --> 00:00:44,290 in a bit. 11 00:00:45,190 --> 00:00:50,980 It definitely matters in terms of which client side extensions or policies areas process when. 12 00:00:51,850 --> 00:00:57,040 But let's just suffice it to say that foreground processing happens for computers at startup and users 13 00:00:57,040 --> 00:00:57,820 at log on. 14 00:00:58,660 --> 00:01:04,150 And then there's a background processing cycle that occurs every 90 minutes, plus a 30 minute random 15 00:01:04,150 --> 00:01:04,690 offset. 16 00:01:05,620 --> 00:01:14,320 So essentially every up to a maximum of every 120 minutes on workstations processing, the engine will 17 00:01:14,320 --> 00:01:19,750 wake up and perform some processing work and go back to sleep for another 90 plus 30 offset minutes. 18 00:01:20,620 --> 00:01:24,490 And that's designed to process any changes that might have occurred in your policy. 19 00:01:24,490 --> 00:01:30,730 While the computer has been started and the user has been logged on on servers, that actually happens 20 00:01:30,730 --> 00:01:31,870 every 5 minutes. 21 00:01:32,800 --> 00:01:36,040 So you get a lot more frequent checking of group policy changes. 22 00:01:36,040 --> 00:01:39,580 And I think the idea there is that servers tend to be more critical. 23 00:01:40,420 --> 00:01:45,670 And if you make changes like security changes to servers, you want them to get those pretty quick. 24 00:01:46,550 --> 00:01:47,300 Okay. 25 00:01:48,170 --> 00:01:50,510 So we've got these two types of processing. 26 00:01:50,570 --> 00:01:51,970 Foreground and background. 27 00:01:52,890 --> 00:01:57,990 So let's look at foreground in processing and background processing in a little bit more detail. 28 00:01:58,890 --> 00:02:01,890 So foreground processing, why is it important? 29 00:02:02,790 --> 00:02:06,570 Well, certain policy areas can only run in the foreground. 30 00:02:07,460 --> 00:02:14,000 Policy areas like folder direction, software installation and before Windows 8.1 group policy preferences 31 00:02:14,000 --> 00:02:16,730 drive mappings also would only run in the foreground. 32 00:02:17,630 --> 00:02:22,820 In other words, these three areas would only run at computer startup or user log on. 33 00:02:23,660 --> 00:02:29,570 And of course, during foreground processing, just like during background processing, the engine doesn't 34 00:02:29,570 --> 00:02:34,670 actually do any work unless that list of GPOs that applied to the computer or the user has changed. 35 00:02:34,670 --> 00:02:38,860 For whatever reason, GPO has been deleted or unlinked. 36 00:02:38,870 --> 00:02:41,000 A security group filter has changed. 37 00:02:41,090 --> 00:02:47,480 The user or computer security group membership has changed and therefore the list has changed. 38 00:02:48,350 --> 00:02:53,420 If none of that happens, if the list is the same from one foreground processing cycle to the next, 39 00:02:53,600 --> 00:02:58,070 then the engine wakes up, runs through core processing, and then does no work. 40 00:02:58,970 --> 00:03:04,460 Now, similarly with background processing, it's really, as the name implies, happening in the background. 41 00:03:05,360 --> 00:03:07,190 The user doesn't know what's happening. 42 00:03:07,310 --> 00:03:10,940 It's just running, picking up every 90 plus 30 minutes. 43 00:03:11,840 --> 00:03:16,610 And basically that same logic applies about whether things have changed or not changed. 44 00:03:16,610 --> 00:03:17,990 And then it goes back to sleep. 45 00:03:18,920 --> 00:03:22,820 So these are kind of the ways that foreground and background processing happen. 46 00:03:23,690 --> 00:03:27,560 The next thing we'll do is look at the different modes for processing.