Group policy partially applying...

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Kevin Dugal (anonymous_at_discussions.microsoft.com)
Date: 08/11/04 

Date: Wed, 11 Aug 2004 05:00:21 -0700

Did you enable User Group Policy Loopback Processing
Mode? It can be found in Computer Configuration -
Administrative Templates - System - Group Policy. It can
be configured to replace or merge with existing GPO's.
Setting it to replace will cause all policies created
above it in the OU to be applied. I use Terminal services
and Citrix here. I've created OU's for my TS servers. I
create policies with custom ADM templates for the
different user groups to redirect folders like desktop,
startmenu, programs, and startup (still trying to figure
out favorites folder). The bottom leval policy in the OU
I call Server/Workstation. The only thing I enable here
is Loopback processing, I set it to replace. I apply this
policy to a group containing my terminal servers. I also
have polices for workstations that do the same thing.

If you have any questions or if something I said doesn't
make sense write back.

Good luck!

>-----Original Message-----
>I have my active directory setup with separate OUs for
user accounts and
>computer accounts. (ie. users in Domain Users OU and
computers in Domain
>Workstation OU)
>
>If I apply a GPO that contains only User settings (eg
Folder Redirection) to
>the Users OU it has no effect. If I apply the same policy
to the Computers OU
>it has no effect (as I would expect).
>It's only if I apply the GPO to both OU's (or at the
domain level where it
>will apply to both OU's) that it has any effect.
>There are no other GPOs over-riding the settings in this
GPO and I have
>waited for the replication to occur, tried
GPUpdate /force and rebooting the
>computer but the GPO still will not apply unless it's
linked to both OUs.
>
>GpResult does not show the GPO as being filtered. It just
doesn't appear in
>the list of GPOs displayed by GPresult.
>
>Has anyone experienced this before and is there a fix
available (or am I
>doing something incredibly stupid...) ?
>
>TIA
>Andy.
>.
>

Relevant Pages

  • Custom .adm file
    ... I get both categories to show up under Administrative Templates in the GPO, ... but the actual policy never shows up. ... Explanation="This key disables the restore button on the Previous Versions ...
    (microsoft.public.windows.server.active_directory)
  • Custom .adm file
    ... I get both categories to show up under Administrative Templates in the GPO, ... but the actual policy never shows up. ... Explanation="This key disables the restore button on the Previous Versions ...
    (microsoft.public.windows.server.general)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • Re: Set GPO for specific user group
    ... OK, now the new GPO is listed, but the ie homepage is still set to ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: Set GPO for specific user group
    ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ... Filtering: Disabled (GPO) ...
    (microsoft.public.windows.server.sbs)