Re: GPO - User Configuration Does NOT Apply

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: aurelio26 (aurelio26_at_discussions.microsoft.com)
Date: 11/05/04 

Date: Thu, 4 Nov 2004 20:06:01 -0800

Thanks for reply, but this is not case. I tried as you said but nothing
happens, same errors same problem.

"Mark Renoden [MSFT]" wrote:

> Hi
>
> First up, I wouldn't have the policy linked at the domain and OU level.
> This will cause it to be evaluated twice. Secondly, it looks like a problem
> with the permissions on the Test OU as an AD object. My suggestion for the
> simplest fix would be to move the users to another location, delete the OU
> and re-create the OU. Link the policy at this level and leave all of the
> default permissions to get a baseline understanding of whether it's working.
> Once it is, start tightening the security filtering as you need it.
>
> Kind regards
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "aurelio26" <aurelio26@discussions.microsoft.com> wrote in message
> news:984F1E7C-6156-4549-9C95-A7F8731C54AF@microsoft.com...
> > Hi,
> >
> > I have a problem with User Configuration not applying to Users.
> > I have only one policy. It is created at domain level and same policy is
> > linked to TEST OU witch contains all test users. All test users are
> > members
> > of test_group. In GPO properties on security tab test_group Read and Apply
> > Policy status are checked.
> > Once user log in user policy is not applied. I checked log and got next
> > messages.
> >
> > Event ID: 1101
> > Source: UserEnv
> > Descriprion: Windows cannot access the the object
> > OU=TEST,DC=testdomain,DC=ca in Active Directory. The access to the object
> > may
> > be denied. Group Policy processing aborted.
> >
> > In Group Policy Result for user there is a message under
> > Denied GPOs
> > Name: LocalGroupPolicy - test_policy (DEFAULT)
> > Link Location: Local - testdomain.ca
> > Reason Denied: Empty - Access Denied(Security Filtering)
> >
> >
> > When I am logged in as user I can browse \\server\sysvol content without
> > problem. Every user have read settings for their OU (TEST) enabled.
> >
> > If you give administrators privileges to regular user, user policy
> > applies.
> > I do not have idea whats going on.
> >
> > Server is W2K with SP4.
> >
> >
> >
> >
> >
>
>
>

Relevant Pages

  • Re: W2k3 TS
    ... I still need help with my third question though. ... When I'm logged on to a test users and click the Windows Security link, ... > policy.:-( How can I get that policy disabled so I can access the Control ... > change password button to be active. ...
    (microsoft.public.windows.server.general)
  • GPO - User Configuration Does NOT Apply
    ... I have only one policy. ... linked to TEST OU witch contains all test users. ... Once user log in user policy is not applied. ... In Group Policy Result for user there is a message under ...
    (microsoft.public.win2000.group_policy)
  • RE: Hididing Options.........
    ... no no no silly rabbit, dns has nothing to do with it, you either have a higher level gpo overriding ... What ever I enabled/disabled in policy its not there everything is same ... > I think this problem is related to DNS. ... >> a Test OU with some test users in order to experiment with this before you ...
    (microsoft.public.win2000.networking)
  • RE: Hididing Options.........
    ... no no no silly rabbit, dns has nothing to do with it, you either have a higher level gpo overriding ... What ever I enabled/disabled in policy its not there everything is same ... > I think this problem is related to DNS. ... >> a Test OU with some test users in order to experiment with this before you ...
    (microsoft.public.win2000.advanced_server)
  • Re: Intermittant GPO failure to apply
    ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)