Re: Denied GPO - Reason is Empty




Keith wrote:
I'm having a problem with some users not getting a login script applied by a
GPO. After using Group Policy Results to interogate the machine and user
profile I've learnt that the GPO was denied by the reason is empty. I know
that the GPO object is still enabled.

Can anyone point me in right direction?

I've one thought. Whenever I've seen "empty" results its tended to be
for one of two reasons. The first being that the policy actually is
empty and hasn't had any settings defined. I'm going to assume that
you've checked and that this isn't the case here. :-) The other time is
when the policy settings are all defined as part of User Configuration
and it is actually being applied to computer objects or vice versa.

Is the GPO being applied to the OU containing the user accounts or the
computer accounts?

Login scripts (as opposed to Startup scripts) are defined as part of
the User Configuration so if the policy is being applied to the
computers it will only read the Computer Configuration section of the
policy and would therefore report that back as being empty.

.



Relevant Pages

  • Re: User Update
    ... Did you set the policy in computer settings or user settings within the GPO? ... that there are two users that for some reason have no group policy. ...
    (microsoft.public.windows.group_policy)
  • Re: Migrate GPO from one forest to another
    ... You can script this operation but there is no way to get around having to create the empty GPO first before importing into it. ... Manage Group Policy Backup and Recovery with the GPExpert Backup Manager for GP! ...
    (microsoft.public.windows.group_policy)
  • Policy DEnied - Empty
    ... I've got a policy that I've applied to a global security group. ... When I use the GP Results interface it reads on some machines that ... the policy was 'Denied' and the reason that the policy is empty. ... What are some reasons for a policy to read as empty to one machine and not ...
    (microsoft.public.windows.group_policy)
  • RE: GPO settings are not applied
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: Automatic_Updates ... GPO: Default Domain Policy ... Secure Proxy Server: N/A ...
    (microsoft.public.windows.server.active_directory)
  • Re: Set GPO for specific user group
    ... OK, now the new GPO is listed, but the ie homepage is still set to ... Microsoft Windows XP Operating System Group Policy Result too ... Small Business Server Domain Password Policy ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)