Re: GPO Not Applying To XP Machines

From: Tim Hines [MSFT] (timhines_at_online.microsoft.com)
Date: 07/01/04 

Date: Thu, 1 Jul 2004 10:05:21 -0400

Check the permissions on the Users container. Make sure that system has
full control, and authenticated user have read. You should also check the
permissions of the GPO that is failing to apply to make sure that
authenticated users have read and apply group policies. 

-- 
Tim Hines, MCSE, MCSA
 Windows 2000 Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
"Tomi" <tomi_thesaint@hotmail.com> wrote in message
news:uleFuTnXEHA.2844@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> I wonder if someone can help me.
> We have a W2k domain, and have purchased a couple of XP laptops.
> For some strange reason, GPO do not seem to apply to the XP laptops when a
> Domain User logs on.
> However, if any of the Domain Administrators log onto the Laptop. The GPO
> works with no problems.
>
> When a Domain User logs on to the XP laptop, the following errors are
logged
> in the Event Log..
>
> Source: Usernv
> Event ID: 1101
> Description: Windows cannot access the object
> OU=Users,OU=??,DC=??,DC=org.... in Active Directory. The access to the
> object may be denied. Group Policy Processing Aborted
>
> The same Domain users can log onto he the network with their old w2k
> machines, and the GPO applies with no problems. The problem seems to be
with
> XP...
>
> Regards...
>
>

Relevant Pages

  • GPO will not apply to Domain Users
    ... XP laptops when a ... The GPO ... >When a Domain User logs on to the XP laptop, ...
    (microsoft.public.windowsxp.general)
  • GPO will not apply to Domain Users
    ... and have purchased a couple of XP laptops. ... The GPO ... When a Domain User logs on to the XP laptop, ...
    (microsoft.public.windowsxp.general)
  • GPO Not Applying To XP Machines
    ... and have purchased a couple of XP laptops. ... The GPO ... When a Domain User logs on to the XP laptop, ...
    (microsoft.public.windows.group_policy)
  • Re: Local install permission
    ... If you really will make them local admins, you can use Restricted Groups in a GPO. ... make with GPO or some script thnx ... the person's domain user account to the local Administrators group. ...
    (microsoft.public.windows.server.security)
  • Re: GPMC [WILDPACKET]
    ... allow that domain user to edit that GPO. ... > manage the GPO from my XPP workstation but it tells me ACCESS DENIED. ... > added my user on the server in group to Manage GPOs ...
    (microsoft.public.windows.group_policy)