Re: Deleted GPO Applying to Workstations

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I just wanted to say that our organization is also having the same problem
with a deleted GPO still applying, and we would be interested to know if /
when Chris finds a solution.

"Robert Kettel" wrote:

I guess, your Policy was a machine policy that modified the registry
(registry tatooing), not only temporarly by setting new values or new keys?
To remove them you would need a "reverse" policy that removes the keys again.
Is that a possible explanation?
--
Robert Kettel


"Chris Smith" wrote:

The GPO was created in the specific child domain only and applied from there.
All parent GPO's are separate and specific.

It was created and deleted from the child domain only.
--
CSS


"samir shah" wrote:

That Policy must have been created in the parent domain itself and must have
been applied from there

Try checking the parent server.

Samir Shah
shahsameerk@xxxxxxxxx

"Chris Smith" <inraindreams@xxxxxxxxxxx> wrote in message
news:3B7E5B29-FFEF-4DD5-94F8-D49A797C039C@xxxxxxxxxxxxxxxx
Windows 2003 parent domain/forest (2003 mode)
Windows 2003 child domain (2003 mode)
Each child domain has two DC's
Workstations are Windows XP SP2

In the child domain in question, group policy is not applying accurately.
For instance, if I delete a GPO completely (not just the link) it may
still
apply to workstations the next day... even if I "gpupdate /force" on the
workstations and reboot. The Group Policy Results Wizard is showing me (in
gpmc.msc) that GPO's I deleted are still applying. The Group Policy
Modeling
Wizard shows the correct GPO settings though.

I can connect to both DC's with the gpmc and the correct GPO's are in
place
and the deleted GPO's are completely gone.

I have run "netdiag /v /l" and I see no strange errors. I have checked the
event logs on the DC's without applicable errors and I rebooted both
yesterday. The domain seems healthy. There are no symptoms of
infrastructure
network problems.

Any ideas?



--
CSS



.

Relevant Pages

  • Re: Deleted GPO Applying to Workstations
    ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at ... with a deleted GPO still applying, and we would be interested to know if / ... (registry tatooing), not only temporarly by setting new values or new ... It was created and deleted from the child domain only. ...
    (microsoft.public.windows.group_policy)
  • Up for a chalenge?
    ... Everything fires up, workstations ... "Application Settings" to the same directory as "My Documents" (Since it's ... When I attempt to access the GPO cache for the OU, ... Group Policy processing aborted. ...
    (microsoft.public.cert.exam.mcse)
  • Re: What is the quickest way to do this
    ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... workstations how long does it take for the settings to take effect by ... FORCE is only nessesary if you want to REDEPLOY an applied GPO. ... so in future when i change or create a new GPO i will just gpupdate in a command line ...
    (microsoft.public.windows.group_policy)
  • Re: Problems creating a domain level group policy
    ... > I am trying to create a domain-level group policy that prevents the last ... I have downloaded the GPMC and installed it on the server. ... Name the GPO "LastUserNotDisplayed" and click OK ... > not on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO
    ... The policy will not cross domains unless the domains are within a site ... cross-domain GPO assignments because it slows down logon and startup ... when the Group Policy has to be obtained from a different domain. ... parent domain to the child domain, ensure there is a DC representing ...
    (microsoft.public.windows.server.active_directory)