RE: Please Help With Using Restricted Groups

ok, the groups are Global - we have two DC's the primary is not in the same
building where my target users are. but a dedicated T1 line gives me great
speed to the primary DC - I ran gprsult and all the policies applied and
filtered as they should

I tried one of your suggestions, of adding the DNS suffix. I did that under
a GPO for the OU I am targeting for the restricted groups. that cut the time
by about 1min but still taking at least 2min compared to 30sec normal.

An additional step I took was to make the group policy users and computers
Asyncroness enabled. By doing this the login times are back to under 1min,
but do you think it will cause any harm to my startup scripts orcomputers not
applying the GPO's I currently have in use..

My startup script consist of 3 map drives all locations are in the same
building.

Thank you so much for responding it was very helpful.

"The AD Designer" wrote:

> what type of group are you using? unversal? where is the GC for the domain?
> check the DNS settings on the machine and ensure its DNS suffix and DNS
> server are correct. Also run rsop or gpresult on the machine to find out
> where the policy is being applied from. Group Policy was applied from:?????
> This sounds more like a dns settings issue than policy
>
> Regards
>
> "Michael LACounty" wrote:
>
> > Hello,
> >
> > I am attempting to utilize Restricted groups on a ou in my domain that has
> > only desktop computer listed. When I utilize the restricted groups policy
> > setting, my users are having a long delay when they try to login. The login
> > process holds at Applying computer settings for longer than 3min.
> >
> > I have other policies that run as they should with minmal impact to users.
> >
> > Is there a way to utilize restricted groups without having such a long delay
> > for the users? Just to let you know my restricted groups only has two
> > objects listed administrator and a specific admin group name.
> >
> > Thank you for any help you lend.
> > Michael
.

Relevant Pages

  • RE: Please Help With Using Restricted Groups
    ... check the DNS settings on the machine and ensure its DNS suffix and DNS ... Group Policy was applied from:????? ... > I am attempting to utilize Restricted groups on a ou in my domain that has ... > Is there a way to utilize restricted groups without having such a long delay ...
    (microsoft.public.win2000.active_directory)
  • RE: Please Help With Using Restricted Groups
    ... The DNS suffix information shoud be placed on the advance TCP/IP properties ... on the client machines along with the DNS servers. ... clients are using group policy then they will be win 2000 upward to XP. ... > a GPO for the OU I am targeting for the restricted groups. ...
    (microsoft.public.win2000.active_directory)
  • Re: After enabling GPO, client pc needs synchronization
    ... correct DNS configuration. ... Server 2003 domain controllers dynamically register information about ... As far as Group Policy troubleshooting you can use rsop.msc on the client ...
    (microsoft.public.windowsxp.security_admin)
  • AD replication with DNS config problem
    ... Group Policy Infrastructure failed due to the error listed below. ... Domain Controller functions like joining a domain, logging onto a ... and Active Directory replication will not be available until the DNS ... The wizard encountered an error while trying to determine if the DNS server ...
    (microsoft.public.cert.exam.mcsa)
  • Re: applying settings to clients forcefully
    ... The dns entry is already given through ipconfig/all. ... Ethernet adapter Local Area Connection: ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Default Domain Policy ...
    (microsoft.public.win2000.group_policy)