Re: Policies not applied after moving users to new OU

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I missed the earlier part of this thread but keep in mind the following. There is a time delay (indeterminate) when moving a user or computer between locations in AD before the GP engine picks up the move. You would think that the GP engine would query AD each time, but that is not the case ( I have tested and confirmed this). It actually seems to cache the old location for some period of time and could take, supposedly, up to 3 hours for the change to be picked up. I have not found any reason for this or any way around it but it has been confirmed by others and reportedly by MS (albeit that was heard 2nd hand).


--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy
http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php


"Library Sysadmin" <LibrarySysadmin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:E6219A86-44AA-4524-9E35-75E2A9A0F756@xxxxxxxxxxxxxxxx
Running out of time on this, but I thought I'd post an update for future.

I haven't found any reason that policies are not being applied uniformly to
users moved into the new OU. It looks like we're going to have to recreate
our roaming profiles from scratch, which I'm not happy about. It's daunting
enough with 300+ users and I wonder what people with thousands of users do.

There are still some discrepancies when creating a new user in the OU.
Personal settings are not retained. For example, setting a desktop wallpaper
to one of the default wallpapers on XP, or changing Explorer menu bar to
Small Icons are never updated in the roaming profile. After the user logs
off/on they have to be changed every time.

I've tried editing the ntuser.ini file and remove the Local Settings entry
with no effect. There is no policy set for "Exclude directories in roaming
profiles".

"Library Sysadmin" wrote:

Mark,

Thanks for the response.
I checked this setting and this did not solve the problem.

"Mark Heitbrink [MVP]" wrote:

> Hi,
>
> Library Sysadmin schrieb:
> > [...]
> > When users log in, policies don’t seem to be applying, or are not > > being
> > applied uniformly for both users.
>
> "always wait for the network at computer startup and logon"
> support.microsoft.com/kb/305293
>
> Mark
> -- > Mark Heitbrink - MVP Windows Server - Group Policy
>
> Homepage: www.gruppenrichtlinien.de - deutsch
> Blog: gpupdate.spaces.live.com - english
>

.

Relevant Pages

  • Re: After enabling GPO, client pc needs synchronization
    ... its feature to cache user settings, such as Outlook cached email addresses. ... work with roaming profiles but I would say you may want to consider trying ... As far as Group Policy troubleshooting you can use rsop.msc on the client ... these users don't see the synchronization message. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: group policy scrolling marquee
    ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
    (microsoft.public.win2000.group_policy)
  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)