Re: Group Policy applies to some users, but not others

From: Tek Response (TekResponse_at_discussions.microsoft.com)
Date: 09/09/04 

Date: Thu, 9 Sep 2004 03:35:02 -0700

Tim,

Thanks for the feedback. The GPO was just assigned the the default
permission, so the 'Authenticated Users' group should get the policy applied.
Just for good measure, the permissions are as follows:
Authenticated users: Read and Apply Policy
CREATOR OWNER: Nothing
Domain admins, Enterprise Admins and System: Read, Write, Create Children,
Delete Children.

We have repeated the test from the other day and logged on as a new user in
the same OU as a user where the GPO isn't working. We then ran gpresult /z
against both of the users logged onto the same machine. An extract from those
is as follows:

Working user:

USER SETTINGS
--------------
    CN=pupiltest,OU=00,OU=Pupils,DC=tgs,DC=local
    Last time Group Policy was applied: 9/9/2004 at 9:42:19 AM
    Group Policy was applied from: curriculum1.tgs.local
    Group Policy slow link threshold: 500 kbps

Non-Working User:

USER SETTINGS
--------------
    CN=pupil00,OU=00,OU=Pupils,DC=tgs,DC=local
    Last time Group Policy was applied: N/A
    Group Policy was applied from: N/A
    Group Policy slow link threshold: 500 kbps

Apart from that the outputs are identical except for the Administrative
Templates section. These have all of the same entires, but in a different
order. Is the order significant at all? I could include that section, but
it's a bit big to include if it isn't helpful. Let me know if it is worth a
look and I'll post it.

Is any of that helpful at all? I am grateful for any advice you can give me.

Cheers,

Neil

Relevant Pages

  • Re: Exchange OWA 2003 Trusted Root Certificate
    ... > So you're going to explain to me how Group Policy works now? ... When I say Policy, I mean it in a broad sense, I am referring to the GPO, ... which as you admitted defaults to "apply" to the Authenticated Users. ... > One cannot be a member of a GPO. ...
    (microsoft.public.win2000.security)
  • Re: I thought I knew Group Policy but Obviously I dont
    ... you said I should have enabled this feature in that the Default Domain Policy. ... > the settings that i gave you are so that the policy is not applied to your ... > DC's or any computer objects that fall into the scope of the gpo that has ... >>> groupinstread of the Authenticated Users default. ...
    (microsoft.public.win2000.group_policy)
  • Re: Help with Security Filtering
    ... What is the difference btn Everyone and Authenticated users? ... For something like Applying Group Policy nothing important ... The Security Properties for the GPO is what we are talking about. ... Some policies are applied at refresh and some can only be applied at next ...
    (microsoft.public.windows.server.active_directory)
  • Re: I thought I knew Group Policy but Obviously I dont
    ... > policy" the setting you want is User Group Policy loopback processing mode; ... > "disable changing homepage" setting is not on any GPO that is linked to the ... > "George Hester" wrote in message ... >> groupinstread of the Authenticated Users default. ...
    (microsoft.public.win2000.group_policy)
  • RE: Users are not authorized for remote login
    ... granted permission to connect to the server. ... the administrators group and Remote Desktop Users group have ... To connect to terminal server properly, users need to be granted the "Allow ... have higher priority and will override the configuration of local policy. ...
    (microsoft.public.windows.terminal_services)
Quantcast