AARGH!! win2003 GPO is driving me NUTS!

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

I want to implement GPO, but with different policies for different users.
i have of course the default policy and i added a second policy "test"
i did all this in the global domain (right click test.local = domain name
and then group policies).

i made a new security group with that user and his computer
i added that user in the default domain policy ==> security ==> read and
apply gpo deny.

so, when i perform a gpupdate /force, it's not in the gpresult.exe list,
that's okay and i can see like that that the security list is working.

then i go to the security of my test policy, removed "authenticated users"
and added the "test" security list.
do a gpupdate /force , gpresult and nothing happens.
when i do the same with a direct username and computername in the security
tab, it works.

okay, then i added a new OU for testing it in that way, moved a user and his
computer and that worked, move another user and computer and that doesn't
works!

in a book i have "mastering windows server 2003" they say and show that it
is perfectly possible to restrict or allow users in GPO's with security lists
but on google i read the opposite...
so, what is it and why is it not working with me ??


grtz,
Verus

.

Relevant Pages

  • Re: Local GPO refreshes outside of refresh interval
    ... I looked through my GPO's Windows Settings section ... > Some policies, including IE policies, have a checkbox that defines if this ... > it should apply EVEN if the value defined in GPO did not change since the ... we are talking about one particular policy: ...
    (microsoft.public.windows.group_policy)
  • Re: "There are 0 filters" using IPSec via GPO
    ... 1)Deleting all IPSec policies in the GPO ... 4)Assigning "request security" policy in Local Security Settings, ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 Server - Group Policy
    ... Group Policies refresh time is 90-minute intervals by default. ... For Windows 2000 Computers see the follow KB: ... Policy Inheritance can be set to this OU it means no policies from higher ... You can also set No Override to a particular GPO. ...
    (microsoft.public.win2000.active_directory)
  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Local GPO refreshes outside of refresh interval
    ... We are experiencing an unique situation where local group ... we are talking about one particular policy: ... a homepage on users and therefore, we never set this policy on the AD GPO. ... Even though we knew that group policies are refreshed every 90 minutes on ...
    (microsoft.public.windows.group_policy)