Re: AD Can't restrict access to server

From: John (jriker1_at_yahoo.com)
Date: 10/23/04 

Date: 23 Oct 2004 10:02:00 -0700

Thanks for the reply. Figured it out kind of. When I restarted both
systems the next day the changes were applying, however any further
changes to the security restrictions again were not applying. I was
trying to run a gpupdate on the AD Server assuming it propegated to
all clients. I then ran gpupdate on the server that the policies were
being applied to and it took. Anyone know why most policies set on
the AD server take effect automatically and right away where these
didn't? Does it have anything to do with the settings beind done in
the branch of the AD Policies called "Local Policy"?

Thanks.

JR

"Chen Fui, Lam \(MSFT\)" <chenfui@online.microsoft.com> wrote in message news:<#YvjDFAuEHA.2468@TK2MSFTNGP09.phx.gbl>...
> Hi,
>
> I would suggest you to do a gpresult /v to check what is the result of it.
> You can get GPresult.exe from support tools.
>
> Cheers,
> Chen Fui
>
>
> --
> This posting provided "AS IS" with no warranties, and confers no rights. OR
> if you wish to include a script sample in your post please add "Use of the
> included script samples are subject to the term specified at
> "http://www.microsoft.com/info/cpyright.htm"
> "John" <jriker1@yahoo.com> wrote in message
> news:e6bb5a8d.0410211739.3551a192@posting.google.com...
> > I have a private network for testing with two computer:
> >
> > 1. Windows 2003 Active Directory Server
> > 2. Windows 2003 Standard Server
> >
> > I have applied numerous GPO's to computer 2 restricting what is
> > available on the desktop for a particular group. These have worked
> > fine. I created a new GPO, put it at the top of the order. It is set
> > with a Deny Local Login on the server OU with that same group in it
> > for testing. The GPO is tied to that group to apply it. I can still
> > log into Computer 2. Tried rebooting to no avail. Any idea what's
> > going on here? It's driving me nuts.
> >
> > Thanks.
> >
> > JR

Relevant Pages

  • Re: Policies having no effect on XP workstation
    ... If the nothing else is define yes the changes are made at the server holding ... If you check the GUID of the particular GPO object you can see if a such ... Also, the initial change is made to the PDC emulator DC, so it ... >> to the W2K3 server the policies started working. ...
    (microsoft.public.windows.group_policy)
  • RE: Computer Policy Not applied
    ... Have you run RSoP from the server side to validate the ... asynchronous application of the GPO is failing. ... > I cannot seem to get computer policy to work through our group policies. ...
    (microsoft.public.windows.server.active_directory)
  • Re: TS and Non TS working
    ... Administrator Accounts and Selected Users in Windows Server 2003 ... MCSE, CCEA, Microsoft MVP - Terminal Server ... policies are still applying - is there any way around this ... Link the restrictive GPO to the OU which contains the TS ...
    (microsoft.public.windows.terminal_services)
  • Re: Accessing Windows 2000 Server Remote Registry
    ... On the inaccessible W2K Member Server, ... Also all of the Secure Channel policies are disabled both locally ... and via GPO. ... > Take a look at a couple settings first on the inaccessible W2k: ...
    (microsoft.public.win2000.security)
  • Re: AD Cant restrict access to server
    ... OR if you wish to include a script sample in your post please add "Use of the included script samples are subject to the term specified at ... Windows 2003 Active Directory Server> 2. ... I created a new GPO, put it at the top of the order. ...
    (microsoft.public.windows.server.active_directory)
Loading