Re: GPO OBJECT ACCESS

From: Joey (Joey_at_discussions.microsoft.com)
Date: 11/29/04 

Date: Sun, 28 Nov 2004 20:09:02 -0800

Steve, thank for the reply. I have tried netdiag and dcgiag. all is perfect.
what is strange is that in the GPO => computer config => security settings
=> local policies => security options => interactive login.... these are
applied perfectly.

"Steven L Umbach" wrote:

> Try rebooting the computer and using gpresult on it to see if it reports the
> computer in the new OU and what Group Policies are applying to it and last
> time applied. Maybe you have some lag in replication of security policy to
> the new computer. If it still does not work, run the netdiag support tool on
> that computer to see if it reports any problems with dns/dc
> discovery/kerberos/secure channel. --- Steve
>
>
> "Joey" <Joey@discussions.microsoft.com> wrote in message
> news:67D5BF54-9BC2-4AA1-AA25-D8024E2FB5EA@microsoft.com...
> >i have also put the computer account in the same ou as the managers.
> >
> > "Joey" wrote:
> >
> >> Help...
> >> i have a win2k3 enterprize server. i have created a ou that i have put
> >> the
> >> managers/user object in. i have created a global security group within
> >> that
> >> ou and made the managers members of that group.
> >> i created a gpo for that ou. i turned object acces audit failure and
> >> success
> >> in the computer portion of the gpo.
> >> i also removed the control panel from the user section in the gpo.
> >>
> >> i have gone to my ntfs volume and chose the folder that i wanted to
> >> audit. i
> >> choose to ( for trouble shooting ) audit the everyone group.
> >>
> >> now they have no control panel as designed but no events in the
> >> event/security log.
> >>
> >> if i enable objet access from the domain level the events are recorded.
> >>
> >> i have no overide or block inheritance.
>
>
>

Relevant Pages

  • Re: krbtgt failure logs
    ... but I would start by running netdiag at a cmd prompt and ... > I'll miss a real security issue. ... > Event Type: Failure Audit ... > Event Category: Account Logon ...
    (microsoft.public.security)
  • Outsourced passports netting govt. profits, risking national security Part 1 of 3
    ... By Bill Gertz - This is the first in a three-part series on the outsourcing of passports. ... The United States has outsourced the manufacturing of its electronic passports to overseas companies — including one in Thailand that was victimized by Chinese espionage — raising concerns that cost savings are being put ahead of national security, an investigation by The Washington Times has found. ... The Government Printing Office's decision to export the work has proved lucrative, allowing the agency to book more than $100 million in recent profits by charging the State Department more money for blank passports than it actually costs to make them, according to interviews with federal officials and documents obtained by The Times. ... The profits have raised questions both inside the agency and in Congress because the law that created GPO as the federal government's official printer explicitly requires the agency to break even by charging only enough to recover its costs. ...
    (soc.retirement)
  • Outsourced passports netting govt. profits, risking national security Part 1 of 3
    ... By Bill Gertz - This is the first in a three-part series on the outsourcing of passports. ... The United States has outsourced the manufacturing of its electronic passports to overseas companies — including one in Thailand that was victimized by Chinese espionage — raising concerns that cost savings are being put ahead of national security, an investigation by The Washington Times has found. ... The Government Printing Office's decision to export the work has proved lucrative, allowing the agency to book more than $100 million in recent profits by charging the State Department more money for blank passports than it actually costs to make them, according to interviews with federal officials and documents obtained by The Times. ... The profits have raised questions both inside the agency and in Congress because the law that created GPO as the federal government's official printer explicitly requires the agency to break even by charging only enough to recover its costs. ...
    (soc.senior.issues)
  • RE: IE Security Group Policy
    ... username and password to access the Companyweb and the GPO did not apply on ... In the Security filtering of the GPO, please select the user account or ... Step 2: Check the IIS settings on the SBS Server: ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy Wont Apply Unless User is a Member of Domain Admin. Why?
    ... under Security Filtering? ... the GPO should contain "authenticated ... gpo will only apply if the test user (uTest) is a member of the Domain ... The test workstation is/are running ...
    (microsoft.public.windows.server.sbs)