Re: GPO not working!
From: slazzen (TAKETHISAWAYslazzen_at_hotmmail.com)
Date: 11/27/04
- Next message: Rabbit: "Re: Filtering GPO application for computers"
- Previous message: Claude G.: "Re: Help! Master DC not replicating to the Second's Sysvol!"
- In reply to: David Atkinson: "Re: GPO not working!"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 27 Nov 2004 16:12:44 +0100
Hi David
My intuition says it has something to do with ACLs in your AD or SYSVOL (had
a similar case recently at a customers place).
Please ensure:
- The user has read access to the GPO object in AD
- The user has read access to the files in the corresponding directory
(GUID) in SYSVOL
- The user has list rights to the root (domain level) of your domain, as
retrieving GPO's upon user logon needs this to look trough OU structure.
Regards
Søren Lassen
MCSE
"David Atkinson" <DavidAtkinson@discussions.microsoft.com> wrote in message
news:4D343193-D707-4E9E-B804-25A223D068B9@microsoft.com...
>I ran gpresult and the output is below. I check DNS and I was able to
>resolve
> our FQDN.
>
>
> Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
> v2.0
> Copyright (C) Microsoft Corp. 1981-2001
>
> Created On 11/24/2004 at 8:21:50 AM
>
>
>
> RSOP results for COACD\bunnyb on CTMTESTLAB1 : Logging Mode
> ------------------------------------------------------------
>
> OS Type: Microsoft Windows XP Professional
> OS Configuration: Member Workstation
> OS Version: 5.1.2600
> Domain Name: COACD
> Domain Type: Windows 2000
> Site Name: WallerCreek
> Roaming Profile:
> Local Profile: C:\Documents and Settings\bunnyb
> Connected over a slow link?: No
>
>
> COMPUTER SETTINGS
> ------------------
> CN=CTMTESTLAB1,OU=ESG Test,OU=ESG,OU=CSD,OU=COACD,DC=coacd,DC=org
> Last time Group Policy was applied: 11/24/2004 at 7:28:36 AM
> Group Policy was applied from: coasrv01.coacd.org
> Group Policy slow link threshold: 500 kbps
>
> Applied Group Policy Objects
> -----------------------------
> Default Domain Policy
> SUS AutoUpdates
>
> The following GPOs were not applied because they were filtered out
> -------------------------------------------------------------------
> ESG Logon Policy
> Filtering: Not Applied (Unknown Reason)
>
> MS Office Install Path
> Filtering: Denied (Security)
>
> ESG Folder Redirect
> Filtering: Denied (Security)
>
> Default Domain Policy
> Filtering: Disabled (Link)
>
> Local Group Policy
> Filtering: Not Applied (Empty)
>
> Tablet GPO
> Filtering: Not Applied (Empty)
>
> The computer is a part of the following security groups:
> --------------------------------------------------------
> BUILTIN\Administrators
> Everyone
> BUILTIN\Users
> CTMTESTLAB1$
> Domain Computers
> NT AUTHORITY\NETWORK
> NT AUTHORITY\Authenticated Users
>
>
> USER SETTINGS
> --------------
> CN=Bugs Bunny,OU=ESG Test,OU=ESG,OU=CSD,OU=COACD,DC=coacd,DC=org
> Last time Group Policy was applied: 11/24/2004 at 8:14:26 AM
> Group Policy was applied from: coasrv01.coacd.org
> Group Policy slow link threshold: 500 kbps
>
> Applied Group Policy Objects
> -----------------------------
> Default Domain Policy
>
> The following GPOs were not applied because they were filtered out
> -------------------------------------------------------------------
> Default Domain Policy
> Filtering: Disabled (Link)
>
> Local Group Policy
> Filtering: Not Applied (Empty)
>
> SUS AutoUpdates
> Filtering: Not Applied (Empty)
>
> Tablet GPO
> Filtering: Not Applied (Empty)
>
> The user is a part of the following security groups:
> ----------------------------------------------------
> Domain Users
> Everyone
> BUILTIN\Administrators
> Remote Desktop Users
> BUILTIN\Users
> REMOTE INTERACTIVE LOGON
> NT AUTHORITY\INTERACTIVE
> NT AUTHORITY\Authenticated Users
> LOCAL
> TPSD GIS FOLDER ACCESS
> Tablet Users
> TPSD GROUP FOLDER ACCESS
>
>
> "Chriss3 [MVP]" wrote:
>
>> Hello David.
>> If you run gpresult or rosp.msc from the client computer where the
>> particular policy should apply, what do you get out there?
>>
>> One thing to check is always DNS. dose it work correct. can you resolve
>> your
>> fqdn active directory domain name?
>>
>> --
>> Regards
>> Christoffer Andersson
>> Microsoft MVP - Directory Services
>>
>> No email replies please - reply in the newsgroup
>> ------------------------------------------------
>> http://www.chrisse.se - Active Directory Tips
>>
>> "David Atkinson" <DavidAtkinson@discussions.microsoft.com> skrev i
>> meddelandet news:5C924C52-AEFF-4FA3-94B8-FDE9E3E8FD55@microsoft.com...
>> >I have created a GPO to controll IE home page and have added a Favorites
>> > folders with 5 url's. I have used Group Policy Management snap-in to
>> > created
>> > this GPO. It is not working, so i ran the Group Policy Modeling wizard
>> > and
>> > the results are the GPO was denied and the reason given was "Empty"
>> > What
>> > does
>> > this mean? Can I get some help on what direction I need to go to
>> > troubleshoot
>> > this.
>> > --
>> > David Atkinson
>> > Network Adminsitrator
>> > Austin Texas
>>
>>
>>
- Next message: Rabbit: "Re: Filtering GPO application for computers"
- Previous message: Claude G.: "Re: Help! Master DC not replicating to the Second's Sysvol!"
- In reply to: David Atkinson: "Re: GPO not working!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
