Re: Help needed with W2K3 Group Policy not being applied at user l

Tech-Archive recommends: Speed Up your PC by fixing your registry

Some other things to check/try:
* The users/groups need "read" and "apply" permissions on the GPO
* MSKB: Scripts May Not Run Before Windows Explorer Starts Even Though the
"Run Logon Scripts Synchronously" Setting is Enabled
(http://support.microsoft.com/default.aspx?scid=kb;en-us;304970)

You cold also try the RSoP (Resultant Set of Policy) mmc, which has a better
GUI and also contains a planning mode, so you can "test" what a result of a
policy would/should be of your GPO assigned to a user.

An even better tool is the Group Policy Management Console:
http://www.microsoft.com/windowsserver2003/gpmc/default.mspx
This tool provides a more user friendly and more ease of use method to
troubleshoot and plan group policies.

Regards,

Erik

"murras68" wrote:


Yes, the users and groups are in the OU whicih the GPO is linked to.

Regards

Steve

Erik wrote:
Are the users accounts who must 'receive' the login script physically located
in the OU where the GPO is linked to?

Regards,
Erik

"murras68" wrote:

Hi,

I'm having problems with a GPO that is linked to an OU which contains a
group which has users and groups from other OU's in AD.

I am running a batch file as a logon for the user configuration part of
the GPO, the Computer part of the GPO is disabled to speed things up.
Basically the GPO will run a batch file for users associated with the
GPO linked to the OU.

The problems that are occurring is that the GPO does not seem to
process. I can run the batch file form the dos prompt of a user's PC
which performs the required function, which is to copy a shortcut from
a network folder to the user's desktop.

When I run GPresult on the user's PC a can see that in the user
configuration the results are that the Local Policy is filtered and no
policy is applied, yet when I run the batch file from within the user
configuration part of the Default Domain GPO everthing works fine. I
have checked the permissions and even used block inheritance on the OU
where the users and groups exist but still no joy.

Has anyone got any suggestions on why this is happening and how to get
this working for users as there is no computer GPO setting as it is
intended for only users to recieve a desktop shortcut as they login.

Thanks

Murras88




.

Relevant Pages

  • Re: More than one GPO on the same OU
    ... How does the Group Policy 'No Override' and 'Block Inheritance' work? ... NO OVERRIDE option of a GPO ... > COMPUTER CONFIGURATION ... [Christoffer Andersson] ...
    (microsoft.public.win2000.group_policy)
  • Re: Complex GPO Configuration Issue
    ... I have read a lot of posts and articles on loopback processing and have used ... If you enforce a policy then it will override all other polices in the path ... to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Complex GPO Configuration Issue
    ... The user settings are definitely enabled on the policy in question. ... pushing GPO to do something it was never intended to do. ... > Loopback processing is computer configuration. ...
    (microsoft.public.windows.group_policy)
  • Re: Log Off, Disconnect, but no Shutdown
    ... Block Policy Inheritance on the OU. ... Move the Terminal Server Computer Objects into the OU. ... Create a GPO called “TS Machine Policy” linked to the OU ... Check “Disable Computer Configuration settings” on these GPO ...
    (microsoft.public.windows.terminal_services)