Re: GPO still being applied to user

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Then what policy settings should be applied? I'm not not sure what you mean.
I set up that group policy to only be linked to that one OU and no others.
Authentacated users is the only group being applied to, they have read and
apply group policy. I added the user I had problems with and assigned them
deny group policy settings.

"Roger Abell [MVP]" wrote:

Again, it depends on which policy settings are involved.

"rocketz21" <rocketz21@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6AB7E44F-5C5C-48F3-A354-77D20A83BB4D@xxxxxxxxxxxxxxxx
I moved one user out of one OU and into another. That OU doesn't have a
gpo
linked to it. I'm using the group policy managment console.

I logged on as the user a few times and still notice the changes from the
original OU being applied. I don't want those changes being applied
anymore,
so I moved the user out of the OU.

I used the gpresult command and did not see that OU being applied to the
user. I signed on to a different computer and noticed the same thing.

I assumed the changes would take place immediately, but they didn't after
2
hours and that gave me the impression it wasn't going to remove that
policy
from the user, eventhough they are no longer linked.
"Roger Abell [MVP]" wrote:

First, why are you stating that the policy is still being applied?
The normal distinction to make here is whether the GPO is being
applied, or whether settings from policies in a GPO are still being
effective (as is expected behavior if the policy settings involved
are actually preferences).
Have you used GPMC to see what GPOs are actually being applied
after the move to the other OU? The other OU is of course not nested
within the original, right? Have you switched the GP editor when you
are looking at the GPO you say is still being applied so that you see
only true policies (not preferences, in the View menu) in order to
determine whether the settings you are concerned over are in fact
preferences and so the behavior you are reported would be expected?

Roger
"rocketz21" <rocketz21@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9D25F9B0-4786-4F70-A9C8-6B8ABF88A05F@xxxxxxxxxxxxxxxx
I set up a group policy and put all the users into one OU. I wanted to
create a separate ou where the policy doesn't apply to.

I removed the user from one OU and into another. This OU doesn't have
any
group policy linked to it. The policy is still being applied to the
user.
I
used the gpupdate /force on the server and client pc and restarted a
few
times and the policy is still being applied.

I even added the user to the orignial OU policy and set the permisson
to
deny group policy for that user. It didn't make a difference. Didn't
think
I would have to deny the user, since they are in another OU and no
longer
linked to the group policy that was applied to them originally.

There is something else I can try or does it take a while for the
policy
to
be removed completely?






.

Relevant Pages

  • RE: Group Policy Connundrum - Stick with it, its confusing!!!
    ... Configuration object of the GPO (vs. ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ...
    (Security-Basics)
  • Re: GPO Question
    ... Group Policy Processing ... As described earlier in this paper, Group Policy is processed in the ... Local Group Policy Object, ... Any domain-based GPO may be enforced by using the Enforce ...
    (microsoft.public.win2000.group_policy)
  • Re: group policy preferences
    ... Microsoft Windows XP Operating System Group Policy Result tool v2.0 ... GPO: ShockwaveTest ... GPO: Default Domain Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Downloading unchanged GPOs
    ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at http://www.sdmsoftware.com/products.php ... On analysis we understand that if a CSE has multiple GPO's then even if one of the GPO changes, all the GPO's belonging to that CSE gets read. ... words, they are not held in some separate place on the client), then yes, all settings from all 3 GPOs would be read by the client if just one GPO changes. ...
    (microsoft.public.win2000.group_policy)
  • Re: Intermittant GPO failure to apply
    ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)