This article describes the issue of Windows session scripts, which are configured on the Role, are periodically evaluated during an existing session; even though they are intended to run only during the beginning and end of the session.
Windows session scripts, which are configured on the Role, are periodically evaluated during an existing session; even though they are intended to run only during the beginning and end of the session.
- This occurs when Dynamic Policy Evaluation is enabled on the Role and the Refresh roles option is selected under DP Evaluation.
- When the Dynamic policy Evaluation periodically evaluates all the role mapping rules on the realm, if the Refresh roles option is enabled, the role assignment and all subsequent operations will be performed all over again; even if there is no role change.
If session scripts are configured on any of the roles on the realm, do not use Refresh roles and Refresh resource policies.