IPSec Policy Is Applied After Being Deleted from a Group Policy

If an IP Security (IPSec) policy is deleted from a group policy before it has been unassigned, the policy is still applied to the Organizational Units (OUs) contained within the policy.

Although the IPSec policy has been deleted from the group policy, it remains in the client's cache in the following location: This value remains on a client computer until a change is made to the IPSec portion of the group policy.

To correctly delete a policy, it should first be unassigned, and then deleted. If a policy is deleted before it is unassigned, you can assign a new policy, and then unassign it. You can run the following command on a client computer to force a policy update: This removes all IPSec policy information from the key listed above.