Re: A small Gp issue

From: Simon Geary (simon_geary_at_hotmail.com)
Date: 01/06/05 

Date: Thu, 6 Jan 2005 20:08:57 -0000

I don't think you are doing anything wrong. This feature is, as the saying
goes, by design. There are two types of Group Policies; policies and
preferences. The settings that are not undoing themselves when they move out
of scope of the GPO are probably preferences that are applied by your ADM.

So what's the difference? A policy will be applied in the registry under
HKLM\Software\Policies (for computer settings) and HKCU\Software\Policies
(for user settings). These are 'proper' group policies and the settings
defined in these registry keys will undo themselves when, as in your case,
you move the user to a different OU. If a Group Policy entry edits the
registry anywhere other than the aforementioned keys they are not policies
but preferences. This means that they will stay stuck in the registry until
you manually undo them. So I think your guess was correct, if this policy is
indeed a preference you will need to create another GPO that undoes the
change.

"Sin Joe" <SinJoe@discussions.microsoft.com> wrote in message
news:D74F8C25-6627-40E7-A757-C64F3D7FDCE3@microsoft.com...
> hi,
> i have created my first group policy and added some adm files in the GP
> MMC.
> GP1 is applied to OU1.
> IN GP1-- All the changes are in Users Configuration section,the changes I
> made through ADM files and computer settings section were all pushed down
> fine to users in that OU1.
> But the moment i move the Users from the applicable OU1 to another OU2,
> the
> changes i made through ADM files are gone, which is fine since there is no
> policy there,But the changes which were made in the Computer settings of
> USer
> section is still there.
> I could create a negative GPO (do'nt laugh on this term hahaha) to take it
> off in OU2, but is it through design or AM I DOING ANYTHING WRONG here.
> please suggest a way to take off those settings withut creating a reverse
> or
> negative policy to take out those changes.
>
> ThankS A TON
> Sin

Relevant Pages

  • Re: Lock Poxy Settings Applied by GP
    ... I went back into the GP and found the Preferences ... I then went back to the policy, unchecked Preferences, ... the proxy settings were easily changed. ...
    (microsoft.public.windows.group_policy)
  • Re: Do I have to disable in a new GP what was enabled in an old GP or can I leave it "not configured
    ... Also, I have a freeware utility on my website called "Clean Registry Policy" that will let you remove preferences, as Roger describes below, as well as policies, if for some reason they are "stuck" on a given system. ... Preferences, as distinct from true policies (i.e. settings that do ...
    (microsoft.public.windows.group_policy)
  • Can not open "Corporate Settings" under Internet Explorer Maintenance
    ... Maintenance:Advanced:Corporate Settings. ... "corporate settings" up the group policy closes and go back to the OU ... Properties dialog box (where it lists the group policies). ...
    (microsoft.public.win2000.group_policy)
  • Re: how to create sub-GPOs
    ... applying your policies to the domain level is not always a good ... I'd recommend that you link your group policies to ... users"-OU and have additional settings you give them. ... |--deptA policy ...
    (microsoft.public.win2000.group_policy)
  • RE: group policy preferences
    ... Do you have any other Group Policies or are these the only ones? ... other Group Policies working? ... More than likely if a policy doesn't apply, ... I have my settings set fine and all my IE 7 settings are working. ...
    (microsoft.public.windows.server.active_directory)
Loading