Re: Why Win 2003 group policy can not apply to client

Hi!

First you need to decide do you want to have your policy settings configured
for computers or users or even both? Then you should create OU and put user
or computer accounts in this OU and then link appropriate GPO to this OU. If
you want your GPO to affect built-in administrator account, which normaly
resides in Users container, then you should link GPO to domain, but I'm not
sure that this is proper solution in your scenario.

Toni


"kysiow" <kysiow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D7038601-D354-4FD2-8AA5-FE61F268A70F@xxxxxxxxxxxxxxxx
Hi!

Are you meaning that I need to add security permission for this group
policy
to administrator? or need to link the GPO to domain controller and domain.
However if we do with this way, this GPO will take affect to all the OU in
domain.

Regards

"T. Uranjek" wrote:

Hi!

Is it possible that your administrator account is not in OU to which your
GPO is linked? GPO applies only to users (user configuration part) or
computers (computer configuration part) in OU with GPO linked.

Toni

"kysiow" <kysiow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CF89B843-B703-4AA9-B35C-7126C6D46617@xxxxxxxxxxxxxxxx
I'm wondering one thing for Windows 2003 server. For instance, I have
configured one group policy for hide all the desktop item for users in
an
OU.
If I run gpresult in server with administrator account. The policy what
I
have configured not shown in "Applied Group Policy Objects". However if
I
logon the server with that OU user account and run gpupdate. The policy
what
I have configured will show in "Applied Group Policy Objects". So I
would
like to know, the group policy what I have configured can be apply to
user
or
not? Do you think this is a proper setting?


"Roger Abell [MVP]" wrote:

There are policy settings added with each Windows release, and newer
ones are ignored by earlier versions of Windows. So, it depends on
what
you are applying and how. If you are settings Windows 2003 vintage
settings, then these will not have any effect when it is a Windows XP
machine. You need to be more precise if you wish a precise response.

"kysiow" <kysiow@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F2F397AE-5319-4718-8793-F6E44B1B7DF6@xxxxxxxxxxxxxxxx
Hi!

I'm using Win 2003 Server. I have configured some group policy in
certain
OU. However when user in that OU log in to Win 2003 domain. The
group
policy
that what I configured in the OU can not applied to workstation.
However
when
I try to login the account use server itself, the group policy can
applied
to
server itself. So I do not what's wrong for the group configuration
for
this
case. So any one got the idea?

Regards








.

Relevant Pages

  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Configuration object of the GPO (vs. ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ...
    (Security-Basics)
  • Re: Set GPO for specific user group
    ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO Question
    ... Group Policy Processing ... As described earlier in this paper, Group Policy is processed in the ... Local Group Policy Object, ... Any domain-based GPO may be enforced by using the Enforce ...
    (microsoft.public.win2000.group_policy)
  • Re: Complex GPO Configuration Issue
    ... I have read a lot of posts and articles on loopback processing and have used ... If you enforce a policy then it will override all other polices in the path ... to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: group policy preferences
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: ShockwaveTest ... GPO: Default Domain Policy ...
    (microsoft.public.windows.server.active_directory)