Re: Group policies show empty in Vista Event log

I can see the logic in your response. These policies are linked at the
Domain level. Should not all users in the domain then be considered as
linked?

"Darren Mar-Elia" wrote:

It sounds like you are not linking those GPOs to the correct spot. If you
have specified per-user settings then you need to link the GPO in line with
the user objects in AD that you wish to affect--not the computer objects.
Hope that helps!

Darren


--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

*******************************
Secure and configure your Windows desktops accurately every time without
having to learn or install new technology.
Find out more about Desktop Policy Manager at
http://www.sdmsoftware.com/desktop_management
*******************************



"DP" <DP@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E0546AF7-9625-40C4-8C65-EFE63532E1B0@xxxxxxxxxxxxxxxx
I have been trying to incorporate a couple of Vista computers in my W2003
based domain. They joined the domain and the computer objects show in AD
just fine. The GPO's are being read by the Vista machines and apparently
filtered correctly as to which should and should not apply. The ones that
should apply show as empty as indicated by the event log as shown below.

The following Group Policy objects were not applicable because they were
filtered out :

Login Script
Not Applied (Empty)
OFFICE
Not Applied (Empty)
Vista Startup
Not Applied (Empty)

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event";>
<System>
<Provider Name="Microsoft-Windows-GroupPolicy"
Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>5313</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2008-04-28T14:10:33.360Z" />
<EventRecordID>30824</EventRecordID>
<Correlation ActivityID="{DE7A80E8-7E82-44C5-812C-5D5543C48CC4}" />
<Execution ProcessID="1284" ThreadID="2976" />
<Channel>Microsoft-Windows-GroupPolicy/Operational</Channel>
<Computer>usernamevista.x.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="DescriptionString">Login Script
Not Applied (Empty)
OFFICE
Not Applied (Empty)
Vista Startup
Not Applied (Empty)
</Data>
<Data Name="GPOInfoList"><GPO
ID="{BC5A9548-C741-454D-9373-40F5A8FA8E43}"><Name>Login
Script</Name><Version>0</Version><SOM>LDAP://DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{BC5A9548-C741-454D-9373-40F5A8FA8E43}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO><GPO
ID="{E1B04AF9-0731-41CB-B594-839C51B7535E}"><Name>OFFICE</Name><Version>0</Version><SOM>LDAP://DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{E1B04AF9-0731-41CB-B594-839C51B7535E}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO><GPO
ID="{4E0AC329-BA50-400E-9E2A-C8B759ED81AD}"><Name>Vista
Startup</Name><Version>0</Version><SOM>LDAP://OU=CH Vista
Computers,DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{4E0AC329-BA50-400E-9E2A-C8B759ED81AD}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO></Data>
</EventData>
</Event>

<GPO ID="{BC5A9548-C741-454D-9373-40F5A8FA8E43}"><Name>Login
Script</Name><Version>0</Version><SOM>LDAP://DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{BC5A9548-C741-454D-9373-40F5A8FA8E43}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO><GPO
ID="{E1B04AF9-0731-41CB-B594-839C51B7535E}"><Name>OFFICE</Name><Version>0</Version><SOM>LDAP://DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{E1B04AF9-0731-41CB-B594-839C51B7535E}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO><GPO
ID="{4E0AC329-BA50-400E-9E2A-C8B759ED81AD}"><Name>Vista
Startup</Name><Version>0</Version><SOM>LDAP://OU=CH Vista
Computers,DC=x,DC=com</SOM><FSPath>\\x.com\SysVol\x.com\Policies\{4E0AC329-BA50-400E-9E2A-C8B759ED81AD}\Machine</FSPath><Reason>NOTAPPLIED-EMPTY</Reason></GPO>

These results indicate that the policy info was being looked for in the
\Machine area and all of these policies were in the \User area.

Any and all assistance greatly appreaciated. Thank you.


.

Relevant Pages

  • Re: Group policies show empty in Vista Event log
    ... It sounds like you are not linking those GPOs to the correct spot. ... If you have specified per-user settings then you need to link the GPO in line with the user objects in AD that you wish to affect--not the computer objects. ... should apply show as empty as indicated by the event log as shown below. ...
    (microsoft.public.windows.group_policy)
  • Re: USB, Floppy & CD Drive access through GPO
    ... Well, if the default policy is linked at the domain level, then all computers in the domain are processing it. ... The user side is empty if you have nothing else in that GPO so that would explain that, but if you're saying that the GPO is not processing because the computer side is empty, then that is another problem. ... Group Policy Management solutions at http://www.sdmsoftware.com ... In other words the 3 policies which has "only" the custom made ...
    (microsoft.public.windows.group_policy)
  • Group policies show empty in Vista Event log
    ... I have been trying to incorporate a couple of Vista computers in my W2003 ... They joined the domain and the computer objects show in AD ... should apply show as empty as indicated by the event log as shown below. ... The following Group Policy objects were not applicable because they were ...
    (microsoft.public.windows.group_policy)
  • Re: game over....
    ... Not until it's empty it's not. ... Unless Obama changes the policy. ... In spite of all the electionerring bluster, I'll bet Obama's policies ...
    (rec.motorcycles)
  • Re: Group Policy Installing Office 03
    ... When you say "group within that OU" it sounds like you made a security group ... and added the computer objects to that group. ... You need to place the objects directly into OU's with policies ... > The policy has the user portion disabled... ...
    (microsoft.public.win2000.group_policy)