Re: Group policy - Inconsitent results depending of the Domain Controller

From: Stuart Graham (news_at_stuart-graham.com)
Date: 10/07/04 

Date: Thu, 7 Oct 2004 18:11:17 +0100

Blocked inheritance on the Domain Controller container by any chance?

"Francisco Monge" <fmonge001@hotmail.com> wrote in message
news:189a83c4.0410070851.13b3aeed@posting.google.com...
> I have 2 DC in my domain running Windows 2003 and I'm having
> inconsistent results with "Group policies".
>
> I have modified the "default domain policy" to activate the Account
> Policies/Password Policy (password history, password lenght, maximum
> password age) for the whole domain and the changes are not taking
> effect on the domain computers.
>
> I used the Group Policy Management Console to simulate the results of
> the policy (Group Policy Modeling Wizard) and I notice that the
> results depends on which DC is used for the simulation. I also notice
> that if I dont specify whitch DC use (process the simulation on any
> available domain controller), it will not work. I also notice that
> this only affects the "Computer Configuration" and not the "User
> Configuration". I've check GPO status and it's Enable (Computer and
> User configuration) and the revision number for the Group Policy is
> the same for both simulations (AD (61), Sysvol (61)).
>
> Does someone have an idea what can be wrong?
>
> Thank you
>
> Francisco Monge

Relevant Pages

  • Windows 2003R2 Group Policy Errors
    ... Policy from our oldest domain controller to other domain controllers. ... All servers are running Windows 2003 R2 32-bit standard edition. ... Group Policy was working fine for several months, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Failed to open the Group Policy Object
    ... Now gpotool dosent't detect any errors. ... But the initial error (Failed to open the Group Policy Object ... > domain controller default Group Policy for instance. ...
    (microsoft.public.security)
  • Re: Failed to open the Group Policy Object
    ... Dompol.msc is used to open Domain Security Policy yet your gpotool results ... selecting properties - Group Policy. ... domain controller default Group Policy for instance. ...
    (microsoft.public.security)
  • Re: SBS 2003 Lost all the Security Policies.
    ... i didn't use dcgpofix i used another sbs 2003 premium has example and created the policies manually. ... I know that your Default Domain Controller Security Policy or Domain Security Policy it is empty. ... DCGPOFIX.EXE will restore the Default Domain Policy and the Default Domain Controller Policy to original default settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: Prevent Domain Users from logging on to specific PCs w/ Group Policies
    ... This user right is defined in the Default Domain Controller Group Policy object and in the local security policy of workstations and servers. ...
    (microsoft.public.windows.server.security)
Loading