Re: GPO OBJECT ACCESS

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 11/29/04 

Date: Mon, 29 Nov 2004 01:32:34 GMT

Try rebooting the computer and using gpresult on it to see if it reports the
computer in the new OU and what Group Policies are applying to it and last
time applied. Maybe you have some lag in replication of security policy to
the new computer. If it still does not work, run the netdiag support tool on
that computer to see if it reports any problems with dns/dc
discovery/kerberos/secure channel. --- Steve

"Joey" <Joey@discussions.microsoft.com> wrote in message
news:67D5BF54-9BC2-4AA1-AA25-D8024E2FB5EA@microsoft.com...
>i have also put the computer account in the same ou as the managers.
>
> "Joey" wrote:
>
>> Help...
>> i have a win2k3 enterprize server. i have created a ou that i have put
>> the
>> managers/user object in. i have created a global security group within
>> that
>> ou and made the managers members of that group.
>> i created a gpo for that ou. i turned object acces audit failure and
>> success
>> in the computer portion of the gpo.
>> i also removed the control panel from the user section in the gpo.
>>
>> i have gone to my ntfs volume and chose the folder that i wanted to
>> audit. i
>> choose to ( for trouble shooting ) audit the everyone group.
>>
>> now they have no control panel as designed but no events in the
>> event/security log.
>>
>> if i enable objet access from the domain level the events are recorded.
>>
>> i have no overide or block inheritance.

Relevant Pages

  • Re: GPO & IPSEC question
    ... but not for IPsec policy. ... You can also use GPMC to make a report (and for that matter ... GPMC does not handle the IPsec policy in its reports. ... >>> GPO Comparison ...
    (microsoft.public.windows.server.security)
  • Re: WIN 2k ADS group policies for Win XP clients dont work
    ... > I am new to ADS group policies. ... When we add group policies, ... > take effect for the clients. ... In both cases there can be 2 major reasons - GPO not "hitting" ...
    (microsoft.public.windows.group_policy)
  • Re: Linking OUs to GPO
    ... I'm always create a User OU and a Computer OU when I design the Active ... Since Group Policies comes in this two parts and it have seems to ... I believe MS recommends staying away from more than three ... >> object there the GPO is linked and then create child OUs. ...
    (microsoft.public.win2000.active_directory)
  • Users and restrictions?
    ... these users are automaticaly assigned to specifick groups and seem to have ... some Group Policies attached. ... Every GPO we create failes! ... restrict/enable policies for users by putting them in the scope of the GPO. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO not applied to new OU for TS
    ... It still is not working in the TERMSVR = OU?? ... When you look at the Group Policy properties it's ... > I was just kinda of curious why the TS wouldl isten to the main GPO on the ... View the results to see if it reports that the TS is ...
    (microsoft.public.win2000.group_policy)