RE: GP won't apply

Yes, the Test enviroment has its own DC with the testworkstation in that
domain. Forgive me, I don't know if my brain has just shut off or if I am
missing something, but When I go to the properties, right click or from View,
go to options and it gives me 3 tabs; Columns, Reporting and General. Am I
in the wrong place?
--
Kathy


"FD" wrote:

> Does your test environment has its own DC? is the test workstation member of
> that domain? Does the WSUS policy is applied?
> To troubleshoot this issue temporarily disable the WSUS and Remote
> Assistance policies: under the GP tab in the OU properties page, highlight
> the policy you want to disable and click options, check disabled, and try
> again.
>
> FD
>
> "Kathy" wrote:
>
> > I have no WMI filters at all. This is my test enviroment. The policy shows
> > enabled but I am not sure where to check the options for the temporary
> > override. I have no policies other than default domain at the higher level,
> > and the other policies at the same level are WSUS and Remote Assistance. I
> > tried looking up on Microsoft all I have found is here:
> >
> > http://support.micorosft.com/default.aspx?scid=kb;en-us;301972
> >
> >
> > Kathy
> >
> >
> > "FD" wrote:
> >
> > > There are a couple of ways to do this. depending on your environment.
> > > Do you have other GPO's at a higher container?
> > > do you have other GPO's at the same container?, disable them temporarily.
> > > When you open the group policy tab, click properties, and then WMI filter,
> > > any thing in there?
> > > Select Options and make sure it is not disabled. you can temporarily check
> > > the no override option to make sure other policies do not override this one.
> > >
> > > FD
> > >
> > >
> > > "Kathy" wrote:
> > >
> > > > How do I figure out where the filter is?
> > > > --
> > > > Kathy
> > > >
> > > >
> > > > "FD" wrote:
> > > >
> > > > > Find where the filter is, make sure you did not check " do not override" or
> > > > > "disabled"
> > > > > under options.
> > > > >
> > > > > FD
> > > > >
> > > > > "Kathy" wrote:
> > > > >
> > > > > > It states that the policy was not applied because it was filtered out.
> > > > > > --
> > > > > > Kathy
> > > > > >
> > > > > >
> > > > > > "FD" wrote:
> > > > > >
> > > > > > > On your workstation, open a command prompt and type "gpresult" and see if the
> > > > > > > policy you created is being applied to your workstation.
> > > > > > >
> > > > > > > "Kathy" wrote:
> > > > > > >
> > > > > > > > I applied it to the workstation OU
> > > > > > > > --
> > > > > > > > Kathy
> > > > > > > >
> > > > > > > >
> > > > > > > > "FD" wrote:
> > > > > > > >
> > > > > > > > > Where did you place the GPO?
> > > > > > > > >
> > > > > > > > > "Kathy" wrote:
> > > > > > > > >
> > > > > > > > > > I have set the following policy to enable screen saver on workstations, but
> > > > > > > > > > it doesn't work.
> > > > > > > > > >
> > > > > > > > > > Policy Setting
> > > > > > > > > > Hide Screen Saver tab Enabled
> > > > > > > > > > Hide Settings tab Enabled
> > > > > > > > > > Password protect the screen saver Enabled
> > > > > > > > > > Screen Saver Enabled
> > > > > > > > > > Screen Saver executable name Enabled
> > > > > > > > > > Screen Saver executable name c:\Windows\system32\ss3df0.scr
> > > > > > > > > >
> > > > > > > > > > Policy Setting
> > > > > > > > > > Screen Saver timeout Enabled
> > > > > > > > > > Number of seconds to wait to enable the Screen Saver
> > > > > > > > > >
> > > > > > > > > > Seconds: 60
> > > > > > > > > >
> > > > > > > > > > Do you know what I am doing wrong?
> > > > > > > > > >
> > > > > > > > > > When I log into the test machine, it lets me do whatever I want.
> > > > > > > > > >
> > > > > > > > > > Help me Please !!
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Kathy
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Kathy
.

Relevant Pages

  • Re: Question: Account Lockout Policy
    ... Robert wrote: ... You could set the option "No Override" on your TS policy however your domain policy can be set to ignore this... ... in Terminal Server Policy (using group policies) for the terminal server users. ...
    (microsoft.public.windows.terminal_services)
  • Re: Question: Account Lockout Policy
    ... if you define policies on OU's in your domain tree they can be overridden by policies higher up. ... You could set the option "No Override" on your TS policy however your domain policy can be set to ignore this... ... Terminal Server Policy for the terminal server users. ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO configuration
    ... > account/password policy undefined and apply different OU ... > the domain level override OU level? ... I thought the lower GPO policies ... All domain controllers will get their Account ...
    (microsoft.public.cert.exam.mcse)
  • Re: AD policies (user vs computer)
    ... the admin everyone's policies are very strict. ... Did you set set the No override option for the wanted policy? ... There is another OU for Workstations. ... Actually I have No Override on Workstations as well as Block Policy Inheritance for both TS Users and for Workstations. ...
    (microsoft.public.windows.server.general)
  • RE: GP wont apply
    ... I have no WMI filters at all. ... This is my test enviroment. ... and the other policies at the same level are WSUS and Remote Assistance. ... > When you open the group policy tab, click properties, and then WMI filter, ...
    (microsoft.public.windows.server.active_directory)
Loading