Re: GPO edit problem

Since it is a domain controller or in the domain controller container then
the Domain Controller Security Policy is the effective setting for anything
defined there and you will not be able to edit the Local Group Policy for
those settings. The "Filtering: Not Applied (Empty)" usually means that
there are no settings defined in Local Group Policy which I usually see only
for "user configuration" as "computer configuration" contains Local Security
Policy which always has settings defined in a default installation. ---
Steve


"Jack" <support@xxxxxxxxxxxxxxxxx> wrote in message
news:42a93a5b$0$5357$5a62ac22@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> yes when i run gpresult i get this:
>
> ....
>
> Applied Group Policy Objects
> -----------------------------
> Default Domain Controllers Policy
> Default Domain Policy
> Default Domain Controllers Policy
>
> The following GPOs were not applied because they were filtered out
> -------------------------------------------------------------------
> Local Group Policy
> Filtering: Not Applied (Empty)
>
> ....
>
> why isn't it applying the local group policy?
>
> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
> news:%23IeP0yWbFHA.2756@xxxxxxxxxxxxxxxxxxxxxxx
>> If the settings are grayed out then most likely a higher level Group
>> Policy is applying those settings. For domain controllers what you
>> mention is configured in Domain Controller Security Policy. You can use
>> gpresult to see what Group Policies/computer configuration are applying
>> to a computer and for Windows 2003 you can use the mmc snapin for
>> Resultant Set of Policy as described in the link below. --- Steve
>>
>> http://www.windowsnetworking.com/articles_tutorials/Resultant-Set-Policy-Planning-Logging.html
>>
>> "Jack" <support@xxxxxxxxxx> wrote in message
>> news:42a83ea1$0$13540$5a62ac22@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>>>I can't change any settings under the Computer Configuration/Windows
>>>Settings/Security Settings
>>> in the gpo editor, they appear to be read only, as they are greyed out.
>>> I'm trying to change the Audit policies.
>>> I'm logged in as Administrator on windows 2003 server.
>>>
>>> any help would be appreciated, thanks jack
>>>
>>>
>>
>>
>
>


.

Relevant Pages

  • Re: GPO not picking up computer settings
    ... settings to undefined in default domain policy. ... run the command net accounts to see if it is what you expect. ... If "block inheritance" is enabled on the domain controller container ...
    (microsoft.public.windows.server.security)
  • Re: Default Domain Controllers Policy ISSUE!!!
    ... GPO's for the Default Domain Controller Security Settings and need help fast. ... Controllers Policy GPO. ...
    (microsoft.public.windows.server.sbs)
  • Re: Group policy - another newbie question
    ... Domain Controller Security Policy is exactly that. ... > settings you see if you open Active Directory ...
    (microsoft.public.win2000.group_policy)
  • Re: Domain Security Policy Versus Domain Controller Security Policy
    ... > Domain Security Policy Versus Domain Controller Security Policy. ... means it takes longer to process the settings. ...
    (microsoft.public.win2000.active_directory)
  • RE: Local Security Policy & secedit
    ... If the settings that the administrator wants to enable are available on ... the user and computer level from the Group Policy Microsoft Management ... Local Group Policy, you can use the following two methods to configure ...
    (microsoft.public.windowsxp.security_admin)