Re: _Group Policy only 1 of 6 is working

From: David Stal (None_at_guesswhere.sk)
Date: 04/14/04


Date: Wed, 14 Apr 2004 10:08:46 -0500

Additional: This AM GPUpdate is now showing the 5 GPOs as "filtering:
Not Applied (empty) on the XP machines

And the event log is listing several Userenv errors when updating the
policies (Events 1030, 1058, 1091, 1085)

I'm really beginning to dislike group policies. (:o|

BTW, a while ago all SYSVOL contents got deleted due to a linked copy
being created via a test tape restore. I fixed it with LINKD and
recreated all polices from scratch.

 

On Wed, 14 Apr 2004 08:39:37 -0500, David Stal <None@guesswhere.sk>
wrote:

>All GPOs reside at the domain level (AD Users and Computers / Domain.
>All users are in various OUs beneath this.
>
>There are no links
>Default security (authenticated users have Read and Apply Group
>Policy). I am a domain admin and these policies are not working for me
>either.
>
>Policies setup
>Password Policies: (not currently working)
>Computer Configuration / Windows Settings / Security Settings /
>Account Policies / Password Policy
>set to: 6 remembered, min age 1 day, max age 42 days, min length 8
>characters
>Interactive logon:Prompt user to change password before expiration
>set to: 5 days
>
>LogOff Script: (Working)
>User Configuration / Windows Settings / Scripts
>Logoff.bat
>
>Now I come to look at it, all the GPOs that are not working are all
>Computer Configuration.
>
>Any clues what might be going on?
>
>Thanks
>David
>
>
>On Tue, 13 Apr 2004 15:00:03 -0700, "Derek Melber [MVP]"
><derekm@braincore.net> wrote:
>
>>What is the config of the OUs and GPOs (links, settings, etc). Also, where
>>do the user and computer accounts live that are in question?
>>
>>--
>>Derek Melber
>>BrainCore.Net
>>derekm@braincore.net
>>"David Stal" <None@guesswhere.sk> wrote in message
>>news:b5ho70psstjkbtcnhauc86vq04pg4u7k6d@4ax.com...
>>> Hi all
>>> I have created 6 group polices on a DC but only 1 is being updated and
>>> enforced on any of the workstations (XP and 2k).
>>>
>>> GPResult says that all 6 were applied to all the XP machine I've
>>> checked. I have verified that all 6 are setup identically
>>> (security/permissions etc.) other than the GP properties of course.
>>>
>>> One of the policies not being updated is the password restrictions
>>> (enforce history 6 passwords, max password age 42 days, min password
>>> age 1 day, min password length 8 chars). However, users can change
>>> their blank password to blank as many times a day as they wish. I need
>>> to fix this!!
>>>
>>> Any help will be appreciated.
>>>
>>> Thanks
>>> David
>>>
>>



Relevant Pages

  • Re: How to ... 2nd request
    ... > I appreciate your clarification and views on my answer Glenn. ... >> OUs and GPOs, ... >> There are two policies you can set to acheive the desired results. ... >> the workstations will not revert back to their default state. ...
    (microsoft.public.windows.server.general)
  • Re: How to ... 2nd request
    ... > I appreciate your clarification and views on my answer Glenn. ... >> OUs and GPOs, ... >> There are two policies you can set to acheive the desired results. ... >> the workstations will not revert back to their default state. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 domain password policy
    ... There is only one password policy per domain, ... If you need different policies within one domain you would need to ... Personally, I like to leave the two default GPOs alone, implementing ... How about those laptop mobile VPN users? ...
    (microsoft.public.windows.server.security)
  • Re: Policies having no effect on XP workstation
    ... The convergence time for GPOs can vary dramatically. ... > to the W2K3 server the policies started working. ... >>> opened up AD Users & Computers and could see the ...
    (microsoft.public.windows.group_policy)
  • RE: Group Policy Issues
    ... the default policies were corrupt. ... Today however I am able to view the GPOs, ... > Controller Policy' is fine, I can edit that one, but any others I cannot ... > Even if I login as Administrator on a PDC, ...
    (microsoft.public.windows.server.active_directory)