Re: Denied GPO - Reason is Empty

So it sounds like you got it working? Yes Group Policy scripts need to be in
the folder for that GPO and each GPO has a GUID that can be seen in the
properties page of each GPO. An easy way to get the script in the correct
folder is to edit the GPO that you want to contain the script and select
"show files" when you are at the script configuration and then copy the
script into the folder. Then go to "add" and add the script you just copied
into the folder.

Steve


"Keith" <Keith@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:30E8996D-AFE8-405B-801C-C91FD58A68FE@xxxxxxxxxxxxxxxx
If i save the Group Policy Results report and open it on another PC, not
the
server, it shows all policies have appiled. very peculiar!!

I've also learnt that the script is contained within a unique policy
folder,
represented by a GUID. I've modified this and the users script changes as
expected.

Thanks for your assistance anyway.

"Karl Stringer" wrote:


Keith wrote:
I'm having a problem with some users not getting a login script applied
by a
GPO. After using Group Policy Results to interogate the machine and
user
profile I've learnt that the GPO was denied by the reason is empty. I
know
that the GPO object is still enabled.

Can anyone point me in right direction?

I've one thought. Whenever I've seen "empty" results its tended to be
for one of two reasons. The first being that the policy actually is
empty and hasn't had any settings defined. I'm going to assume that
you've checked and that this isn't the case here. :-) The other time is
when the policy settings are all defined as part of User Configuration
and it is actually being applied to computer objects or vice versa.

Is the GPO being applied to the OU containing the user accounts or the
computer accounts?

Login scripts (as opposed to Startup scripts) are defined as part of
the User Configuration so if the policy is being applied to the
computers it will only read the Computer Configuration section of the
policy and would therefore report that back as being empty.




.

Relevant Pages

  • Re: User Profiles
    ... You can use Folder redirection for the Start Menu, ... Exactly what icons are you getting from the Default Domain Policy, ... and in which GPO setting are they defined? ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Error
    ... Configured GPO on an OU 2 levels under the domain object called folder ... Configured a 2nd GPO on the the parent OU ... custom Group Policy Templates should be edited yet this is the first I have ... you should not edit the default adm files two reasons. ...
    (microsoft.public.windows.group_policy)
  • Re: How to configure LogOff script to remove a folder from users m
    ... Re-linked the GPO to an OU that contains User accounts, ... I made sure that my LogOff policy is identical to the working LogOn ... What accountneed permissions on the script? ... Check the NTFS permission on the *.vbs file. ...
    (microsoft.public.windows.group_policy)
  • Re: Want to run a script at logoff
    ... The default domain controllers policy effects ONLY the domain ... test GPO with test computer and test user accounts. ... The login script still does not run. ... I assume you have used Group policy management console, ...
    (microsoft.public.windows.group_policy)
  • Re: Want to run a script at logoff
    ... You should not change this policy or the default domain policy, create new GPOs and link them to the same level if needed, if you have problems you can always easy go back to the default ones with deleting the self created. ... In your case the logoff should run on USER logoff on there workstations so the GPO has to be linked to an OU where the user accounts are located. ... The login script still does not run. ... I assume you have used Group policy management console, ...
    (microsoft.public.windows.group_policy)