We have a domain with W2ksp4 based DC's and WinXPsp2 clients.
The Gpo for the user are not being applied to domain users but to domain
admins.
Permissions for the GPO are Authenticated Users - Read and Apply Group
Policy
On the client i get an error in the application eventlog with:
Source: Userenv
Event ID: 1053
User: NT INSTANS\SYSTEM
Description:
Windows cannot determine the user or computer name. (No mapping between
account names and security IDs was done). Group Policy processing aborted.
Do Not Execute Group Policy for Admins Group ... so that the group policy will only apply to a certain group of users ...domain admins that logon to a computer in that OU). ... In this case the GPO would not ... it's intent is to change the user settings... (microsoft.public.win2000.group_policy)
Re: Does user have to be a member of domain admins? Surely not! ... The userdoes not have to be a member of the domain/local administrators ... What I would do is run the Group Policy Management snap-in and review the ... The delegation is who should modify/delete the gpo.)... gpo will only apply if the test user is a member of the Domain Admins... (microsoft.public.windows.server.sbs)
Re: blocked inheritance ... Take a look at "security filtering" under the scope tab for the Group Policy... That shows what users/groups the GPO applies to ... both read and apply permissions for allow will have the GPO apply to them ... authenticated users have read and apply allow permissions but domain admins... (microsoft.public.windows.group_policy)
RE: Restricted Group Problem My Scenario and problem..what am i do ... Read and Apply Group Policy Permissions.... Normally, the computer accounts... Open up a GPO... this group, I add Domain admins, another domain group, and then i choose ... (microsoft.public.windows.server.active_directory)
Re: Using Group Policy to give install permission ...Group Policy is simply (well, ...Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO.... (microsoft.public.win2000.group_policy)
