RE: Group Policy
From: JHK (JHK_at_discussions.microsoft.com)
Date: 09/22/04
- Next message: Cary Shultz [A.D. MVP]: "Re: User Rights in Domain"
- Previous message: In Disguise: "Re: Active Directory and Novell E Directory"
- Maybe in reply to: Hansen: "Group Policy"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 22 Sep 2004 09:19:04 -0700
D,
Have you checked the security on the Terminal Servers OU to make sure that
authenticated users have the appropriate level of privilege?
-jhk
"D" wrote:
> I am having a few problems with Group Policy. I think something has gone
> wrong.
>
> I have OU's setup as such...I have an "My Users" OU and a "Terminal Servers"
> OU along with a number of others.
>
> I have a GPO set up specifically for the Terminal Servers OU. Things like
> "Dont allow shutdown of the system", Control Panel settings, etc. are
> included in this GPO. I am also trying to customize the start menu based on
> Group Membership. I had it working over a year ago, but didnt end up going
> with it. Now I have a new OU and a new set of Terminal servers with this.
>
> I am using Windows 2000 Terminal Server with all available service packs,
> patches and updates.
>
> My group policy settings are not taking place on the Terminal Servers.
>
> When I create the debug log, I am seeing the following error:
>
> USERENV(d0.340) 16:48:34:250 EvaluateDeferredOUs: Object <OU=TS
> New,DC=hr-dev,DC=com> cannot be accessed
>
> Also, when I run GPOTools.exe, I see the message "Machine extensions: not
> found"
>
> Something seems to be seriously wrong. I did previously create, edit,
> backup the GPO's with the Windows 2003 Group Policy Management interface. I
> thought this might have been a problem, so I recreated my GPO's.
>
> Also, to note. I once had a domain wide policy. I thought this might pose
> a problem, so I removed it and applied it directly to the "My Users" OU.
> However, I seem to be inheriting settings from this still. I know this when
> I run the gpresult.exe utility. To solve this, I tried adding the domain
> wide policy to the Terminal Servers OU and then clicking on "disabled"...I
> was prompted and it said all settings previously set by this GP will be
> removed. I thought that would be great.
>
> But still nothing is working. I have done hours of research.
>
> Any help is appreciated. I really want to get the settings of the Terminal
> Server's GPO applied.
>
> Thank you in advance.
- Next message: Cary Shultz [A.D. MVP]: "Re: User Rights in Domain"
- Previous message: In Disguise: "Re: Active Directory and Novell E Directory"
- Maybe in reply to: Hansen: "Group Policy"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
