Re: Group policy issue - settings being applied even after removal...

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Brad Pears (donotreply_at_notreal.com)
Date: 10/01/04 

Date: Fri, 1 Oct 2004 16:06:26 -0400

So what you are saying is that I should change the setting from not
configured to "Disabled" then if I want the policy to be removed?

here's one...

At one time I had removed the users "My Documents" folder from the desktop
and start menu using a GPO. Since then I have redirected (using Folder
redirection) all users "My Documents" folders to a directory on a different
drive. Once I did that, I then changed the GPO so that the "remove My
documents " policy was "disabled". I assumed that this would then place the
"My documents" shortcut back on each users desktop affected by this GPO...
(am I correct?)

Well, some users have it - some users don't - and they are all being
affected by the same GPO... or so I think...

At one time I had other GPO's assigned to the OU's that some of these users
are in. I have now disabled them all and am only currrently using the one
GPO on the OU covering the two terminal servers. It's almost like some users
are still having policies applied from older GPO's I once had and even
disabling them is not resetting everything..

Could this be possible? What is the best way to eliminate old GPO's so that
they are not being applied anywhere and only settings in teh GPO I want are
being applied?

I have also set this new GPO to not allow policy override and block policy
inheritence...

Thanks,

Brad

"Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> wrote in message
news:xn0dnzkrc8uri7g009@msnews.microsoft.com...
> Brad Pears wrote:
>
> > We have two terminal servers in our environment. SOme users use the
> > terminal server when they are logged on remotely from home (or
> > whereever) and use a local machine when they are in the office.
> >
> > Because of this, I created a new OU and placed both TS machines in
> > that OU so I could apply the same GPO to both machines - thereby
> > affecting only users logged onto those machines.
> >
> > I do not currently have any other GPO's enabled. I have a few
> > configured but they are currently disabled...
> >
> > One particular user who uses terminal services exclusively (at home
> > and in the office) for some reason is not being assigned all the GPO
> > properties properly.
> >
> > At one time I had the GPO configured so that the "Network
> > Neighbourhood" icon was not on the desktop. I had to change this so
> > users can browse to other machines. After the change, for some
> > reason, her network neighbourhood icon never did reappear - and this
> > change took place several days ago... Every other user logged on to
> > the TS's can now see this icon again... I have her working around it
> > for now but cannot understand why she is not picking up this policy
> > setting!
> >
> > There are a few other policy settings that are still being applied to
> > her even after I have changed them to "not configured".
> >
> > How can this be? What should I be looking for??
>
> GPO settings of "not configured" simply means that the user settings
> will not be changed. Whatever state they're currently in.
>
> So, if you used a GPO to set something to "off" (say), and now changed
> it to "not configured", anyone who's been set to "off" will stay that
> way. Anyone who is setup after the policy change will get the original
> default value.
>
> --
> Steve Foster [SBS MVP]
> ---------------------------------------
> MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • Re: GPO not being applied
    ... They used to be in a workgroup and this SBS domain was the ... machines relative to the removeable media settings. ... Remember Local Policy is ... SBS has an OU with all users and I have a custom GPO bound to ...
    (microsoft.public.windows.server.sbs)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Help
    ... grab the security stuff from the domain policy only. ... I may be way off the mark here, and perhaps the policy for disabling ... The password that he/she is using does not meet the complexity standard. ... This must be set at the domain level, that> is, this GPO must be linked to the domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO not being applied
    ... They all have USER privilages on their machines. ... They used to be in a workgroup and this SBS domain was the first to join and only those policies were applied. ... did you some time in the past setup a universal policy that prohibits these actions. ... SBS has an OU with all users and I have a custom GPO bound to that OU. ...
    (microsoft.public.windows.server.sbs)
  • Re: Controlling User Policy via Computer account
    ... > (1 and 2 are adding grants of read/apply in the GPO security) ... > 4 place the machines in the OU to which this GPO is linked ... Even with the Loopback policy, ...
    (microsoft.public.windows.group_policy)