Re: Local policy overriding domain policy

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi,

So you say there are several machines that this is happening to,
meaning it is machine specific. Have we determined that these machines
are processing group policies successfully regardless of which ones are
applying?
Maybe these machines are not even receiving the proper policies in the
first place.
Start off by the event logs and verify there are no errors in regards
to group policies applying.
I would also enable userenv logging on these's machines and look over
the logs to see where the settings are/ or not applying.

How to enable user environment debug logging
http://support.microsoft.com/kb/221833

Good luck

Harj Singh
Power Your Active Directory Investment
www.specopssoft.com

cvlowe@xxxxxxxxx wrote:
I have several Windows XP machines which are not getting group policy
settings from the various domain policies. I have run the various
tools- and the resultant set of policy says that the local group policy
is being applied after the domain policies. I have manually checked
this on 3 PCs- and there are no settings defined in the local group
policy. The problem is- the domain settings are not bieng applied to
the PCs either. All the settings seem to be not defined. The policies
are all enabled and enforced.

.

Relevant Pages

  • Re: Aftermath of RDIRCMP.EXE?
    ... We are going to try creating a new OU, putting the machines in there, ... with Deny Read and Deny Apply Group Policy permissions on the Default Domain ... Ok, check the policy settings that you want (as I already said, some ... policies only work at domain level, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Assigning File and Folder Permissions Via Group Policy
    ... still pretty new to group policies and so wanted to double-check my ... so a few policies with a lot of settings in each policy may ... or two settings also may not be the best solution. ...
    (microsoft.public.windows.group_policy)
  • Re: how to create sub-GPOs
    ... applying your policies to the domain level is not always a good ... I'd recommend that you link your group policies to ... users"-OU and have additional settings you give them. ... |--deptA policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Group Policy not applying
    ... that I cannot get group policies to affect. ... Although the gpresults show the policies have been applied, when I check the specific settings they are unchanged. ... I have had a number of other users with the same permissions, from the same OU log on and the settings take effect; I've copied this user and created a new one based on her account and again all the settings take effect. ... If it's an XP or above machine, check with rsop.msc if there's a policy overwriting the settings that you want to see. ...
    (microsoft.public.windows.group_policy)
  • Re: Aftermath of RDIRCMP.EXE?
    ... try not to use the Default Domain Policy for that. ... Ok, check the policy settings that you want (as I already said, some ... policies only work at domain level, ... and create the machines inside that OU. ...
    (microsoft.public.windows.server.active_directory)