GPO tool

Group Policy made searchable

A free ADMX browser or comparison tool for IT administrators. Search policies, find registry keys, and see exactly what each setting writes to the Windows Registry. Or compare two GPO backups to see exactly what has changed between them.

Select a product
  • Select a category.

Remove users’ ability to invoke machine policy refresh

This policy setting allows you to control a user's ability to invoke a computer policy refresh.

If you enable this policy setting, users are not able to invoke a refresh of computer policy. Computer policy will still be applied at startup or when an official policy refresh occurs.

If you disable or do not configure this policy setting, the default behavior applies. By default, computer policy is applied when the computer starts up. It also applies at a specified refresh interval or when manually invoked by the user.

Note: This policy setting applies only to non-administrators. Administrators can still invoke a refresh of computer policy at any time, no matter how this policy setting is configured.

Also, see the "Set Group Policy refresh interval for computers" policy setting to change the policy refresh interval.

Note: If you make changes to this policy setting, you must restart your computer for it to take effect.

Registry Information

VendorMicrosoft
ProductGroup Policy
CategoryGroup Policy
Applies toComputer Configuration
Supported onWindows XP
Registry Key[HKLM]SoftwarePoliciesMicrosoftWindowsSystem
Value NameDenyUsersFromMachGP
TypeREG_DWORD
Enabled value1
Disabled value0