Re: Machine Policy not being applied

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 07/13/04 

Date: Tue, 13 Jul 2004 16:24:47 +1000

Hi John

I'm not totally clear on what you're doing but for the machine settings to
apply, the computer account must be in the OU to which the policy is
applying, the computer configuration settings must not be disabled and the
computer account must have read and apply group policy permissions
(authenticated users takes care of this).

HTH 

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"John Price" <jwp@beco.com> wrote in message 
news:ufdFx1DaEHA.712@TK2MSFTNGP11.phx.gbl...
> Hey all,
>
> Well I am finally going insane. I have built a custom ADM file for testing
> and it appears to work well for the USER settings but I could not get it 
> to
> work with the Machine settings.
>
> I created a new policy off the Domain and applied it to my user account.
> GPResults shows it being blocked - security
>
> I created a new OU and moved my user account into the OU. Created a GPO 
> and
> applied it to Authenticated users. Same results as above.
>
> I added the template to the Default Domain Policy - IT WORKED FINE. Anyone
> have any ideas of what to do now.
>
> Thanks in Advance.
>
> John Price
> JWP@Beco.com
>
>

Relevant Pages

  • shutdown without logon not possible anymore ?
    ... The default domain policy the value "not defined" ... I moved the computer account in AD ... As a result, the local policy was "reseted", the value was ...
    (microsoft.public.win2000.security)
  • Setting password policy on the OU
    ... Is it possible to set a password policy for the OU only ... and not the Default Domain Policy? ... computer account based? ...
    (microsoft.public.windows.group_policy)
  • Re: Domain Users group does not retain the Log on Locally right
    ... Readded the computer account. ... Computer reboot when completed. ... Logged onto the SBS Domain as administrator. ... Went in the Local Policy Editor and cofirmed that DOMAINANME\Domain Users ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Installation Services, DoOldStyleDomainJoin=Yes
    ... It appears that the policy had been set previoulsy but when the policy was ... > SP1 introduced additonal RPC and SAMR security and during the upgrade SP1 ... > updates that SP1 will be over written and thus the workstation will not have ... >> provide domain account credentials to join the computer account to the ...
    (microsoft.public.windows.group_policy)
  • Re: Domain Users group does not retain the Log on Locally right
    ... successfully completed but after the updates the Domain Users disappeared. ... Users" were not members of the "Log on Locally" policy. ... computer account from AD and then readding the computer account then ... workstations and it does add Domain Users to the Lo on Locally policy. ...
    (microsoft.public.windows.server.sbs)