Re: Default GP Applies to some but not all users

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 02/12/04 

Date: Wed, 11 Feb 2004 21:59:47 -0700

Did you try to run the gpresult -v or -s (verbose and superverbose)?

As for the secret decoder ring... go search TechNet. It will help a lot! 

-- 
Derek Melber
"JeremyH" <anonymous@discussions.microsoft.com> wrote in message
news:ddb901c3f077$243407f0$a301280a@phx.gbl...
> Derek,
>
> Once again, thank you for your suggestions.
>
> 1) The DNS settings appear to be correct
> 2) GPResult.exe produces the following; "Failed to open
> key with 2"
> 3) The policy fails to be picked up by the same users
> regardless of whether they log on to a W2K or an XP client.
> 4) Nothing relevant in the event logs (any of them)
> 5) Only one site is involved
>
> Where would I find the meaning of the gpresult message?
>
> Regards
>
> Jeremy
> >-----Original Message-----
> >More ideas:
> >
> >1) don't only ping, but make sure the DNS settings are
> correct. DNS IP
> >address, DNS domain name for the client computer, and DNS
> registration
> >domain name for client computer
> >2) Run the gpresult to see if there are any errors
> reported.
> >3) for you XP clients, run the RSOP.msc tool and the RSOP
> tool in the Help
> >and Support center (under advanced tools)... they can
> help track down
> >possible issues
> >4) check out the EVent Logs for possible clues
> >5) if you have multiple sites, make sure that replication
> is not the issue.
> >You might be getting GPOs from some DCs that have the
> correct settings, but
> >others don't have the correct settings yet. Run the
> Replication Monitor from
> >the Support Tools to track down the GPO replication
> status. It will tell you
> >if the Sysvol and AD have the same version of GPO. You
> can also force
> >replication across sites using this tool.
> >
> >Hope these can help
> >
> >-- 
> >Derek Melber
> >"JeremyH" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:d91c01c3f009$27cd6550$a301280a@phx.gbl...
> >> Thanks for your input Derek
> >>
> >> 1) I am trying to set up security on W2K and XP clients
> >> 2) All the user accounts are in the User folder in
> Active
> >> Directory Users and Computers, the GPO is the default in
> >> the top level of ADU&C
> >> 3) I am able to ping dc.domain.local so I gess DNS is
> okay
> >>
> >> Any other ideas?
> >>
> >> Jeremy
> >>
> >> >-----Original Message-----
> >> >couple of points to consider:
> >> >
> >> >1) GPOs only apply to 2000 and XP, not NT
> >> >2) Be sure all of the accounts (either comptuer or
> user)
> >> are in the correct
> >> >OU where the GPO is linked
> >> >3) Be sure that DNS is properly configured on each
> client
> >> computer. DNS
> >> >issues will make GPOs fail quick!
> >> >
> >> >-- 
> >> >Derek Melber
> >> >
> >> >"JeremyH" <anonymous@discussions.microsoft.com> wrote
> in
> >> message
> >> >news:dfdd01c3efdd$f907ba70$a501280a@phx.gbl...
> >> >> I have a network consisting of a W2K DC, a NT4 member
> >> >> server, W2K, NT4 and XP workstations.  I have
> applied a
> >> >> default GP which is being picked up by some users but
> >> not
> >> >> by others.  Using GPResult.exe I get the error
> >> >> message "Failed to open key with 2" when logged on
> as a
> >> >> user who doesn't pick up the policy.  There are no
> >> related
> >> >> errors in the Event Log. Any ideas would be
> appreciated
> >> as
> >> >> I've run out of 'em!  There are no related errors in
> the
> >> >> Event Log.
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Domain Users into Local Admins
    ... the client itself to see if any pertinent errors are reported that may help ... > I've just rebooted 4 times, checked the DNS is correct and made sure both ... >> 1) Machine or user must be a domain member and authenticate with the ... >> 3) User or machine is not in the container to which the GPO is linked. ...
    (microsoft.public.windows.server.security)
  • Re: Logon script not working
    ... it adds the login information of the server. ... When you say you put the file in the logon window in GPO, do you mean that you physically copied it into the physical location of the GPO after you clicked on the Browse button? ... I assume there are no event log errors on the client side or the SBS side, as well as that the client and SBS are only configured to only use the SBS' IP as a DNS address. ...
    (microsoft.public.windows.server.sbs)
  • Re: Default GP Applies to some but not all users
    ... but make sure the DNS settings are correct. ... address, DNS domain name for the client computer, and DNS registration ... the Support Tools to track down the GPO replication status. ...
    (microsoft.public.win2000.group_policy)
  • Re: Default GP Applies to some but not all users
    ... The DNS settings appear to be correct ... >address, DNS domain name for the client computer, and DNS ... >if the Sysvol and AD have the same version of GPO. ...
    (microsoft.public.win2000.group_policy)
  • Re: xp workstations unable to log-in to win 2003 domain at boot-up
    ... ..what do you think/ ill check the event logs and send you whateveer ... > Can you access this share from your client... ... I did reboot the server after changing the various settings. ... >>> To be able to go to the internet you will have to set up DNS on DC ...
    (microsoft.public.windows.server.setup)