RE: Rid Machine of GPO No Longer Applied

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

That article is mainly about troubleshooting failure of Group Policy for
multiple computers or users, as opposed to the problem I am describing which
is when a single computer in an OU is having GP problems. However, there is
a link in the article to a KB article which gave me some information that is
new to me. It says to look for a disabled DFS client service, an ACL on the
root of the System Drive that doesn't include Everyone and even a disabled
Server service. I'll take a look at those things on the trouble machines.
Thanks.

"Michael" wrote:

Check that these machines are properly properly processing group policy.

http://www.windowsnetworking.com/articles_tutorials/Troubleshooting-Group-Policy-Processing.html


"Baboon" wrote:

I see some behavior on the occassional XP client where it appears a machine
continues to process a GPO that no longer applies to it.

For example, I see a few machines that continue to contact a WSUS server
every day even though their linked GPOs no longer point them to a WSUS
server. In another case, it seems that one machine out of 20 in an OU keeps
trying to process a GPO that is linked to a parent OU, but where the link is
disabled.

I hope this is pretty straightforward - What can I do on problem machines to
get them to stop processing these GPOs? Or am I misunderstanding what is
going on?

Thanks.
.

Relevant Pages

  • Re: DST Updates Deployed via Group Policy
    ... if they are just reg settings and nothing more then ... WAS able to select the group in the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... In KB914387 Microsoft gives you the registry keys that need to be changed ... saw that my EST reg entries were the same as my 2003 server and 2000 ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ...
    (microsoft.public.windows.group_policy)
  • Re: DST Updates Deployed via Group Policy
    ... Aren't these "patches" for XP and 2003 just the same registry ... WAS able to select thegroupin the GPO editor so I assumed that it ... things are working, that is, the machines are being healthy little ... however I have not tested the script locally on ...
    (microsoft.public.windows.group_policy)
  • Re: Basic Sec Template Design
    ... defined in a GPO linked to the domain object to impact domain accounts ... allowed to impact machines then these impact the machine local ... Have you also reviewed the security guides? ...
    (microsoft.public.windows.server.security)
  • Re: DST Updates Deployed via Group Policy
    ... I did run the script locally on the testing machine ... WAS able to select the group in the GPO editor so I assumed that it could ... things are working, that is, the machines are being healthy little ... Windows 2000 Pro machines and 2 Windows 2000 Servers that require this ...
    (microsoft.public.windows.group_policy)