tailscale/util/winutil/gp
Aaron Klotz 2b62cb54a7 net/dns, util/winutil: improve detection of group policy affecting NRPT
Due to a customer issue, I investigated the Windows Dnscache service more
intensively. I learned that the only time it attempts to read the NRPT
from group policy is in response to a group policy change notification.

Under the hypothesis that policy refresh is not effectively delivering GP
notifications due to its dependency on reaching a DC, I replaced our use
of the RefreshPolicyEx with the quasi-documented GenerateGPNotification API.

Tests have been updated to ensure they check that they are running as
LocalSystem, which is required for GenerateGPNotification.

Fixes #20187

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2026-07-10 13:53:26 -06:00
..
gp_windows_test.go util/winutil/gp: deflake TestGroupPolicyReadLockClose 2026-05-05 14:02:35 -07:00
gp_windows.go net/dns, util/winutil: improve detection of group policy affecting NRPT 2026-07-10 13:53:26 -06:00
mksyscall.go net/dns, util/winutil: improve detection of group policy affecting NRPT 2026-07-10 13:53:26 -06:00
policylock_windows.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
watcher_windows.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
zsyscall_windows.go net/dns, util/winutil: improve detection of group policy affecting NRPT 2026-07-10 13:53:26 -06:00