Re: Computer-Assigned Programs Cannot Be Deployed

Mo_Naji,

I am pretty sure that you can not have one GPO in one domain apply either to
the user-configuration side or to the computer configuration side in other
domains.

This is by design. Consider how this works. There are two parts to a GPO
(from a replication point-of-view): the GPC and the GPT. The GPC (Group
Policy Container) is replicated via the Domain Naming Context (or, Domain
Partition). This is replicated only to Domain Controllers in the same
Domain. The GPT (or Group Policy Templates) is replicated via the SYSVOL.
This, also, would happen only to Domain Controllers in the same Domain.

Now, have you considered using the GPMC (Group Policy Management Console)
and copying this GPO to the 'other' child domain? You would just have to
make sure that you changed the appropriate 'things' (such as
dc=child1,dc=yourdomain,dc=com to child2,dc=yourdomain,dc=com). I have not
done this as I am just now playing with the 'latest and greatest' (which
clearly indicates that I am about three years behind!).

Maybe someone else can chime in with a solution that I am overlooking (or
simply do not know).


--
Cary W. Shultz
Roanoke, VA 24012

"Mo_Naji" <MoNaji@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F5373176-B41C-4ECB-901E-9104B994E8BD@xxxxxxxxxxxxxxxx
I have an empty root domain and 2 child domains. I have a file server in
one
of the child domains that holds the source file for the packages. Users
and
computer accounts from both child domains have access permissions to the
share. I have packages assigned to computers in both domains. Assigned
programs only get installed on the computers that are in the same domain
where the file server is located. If I make the server member of the other
domain it will only work on the computers from that domain, it's not a DNS
issue.
I saw KB274274 but I am under the same forest but different child domains.
The easy solution is to put a file server for the packages in each domain,
I
am trying to avoid that only last resort solution. ( I hope I explained my
sitution)
Thanks.


.

Relevant Pages

  • Re: Computer-Assigned Programs Cannot Be Deployed
    ... As Kevin stated it should be possible to have a GPO that resides in one ... (this just a file server not a domain controller). ... (from a replication point-of-view): ... I have packages assigned to computers in both domains. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Active Directory Folders
    ... >> I'm certainly not going to discount a book published by Microsoft ... >> replace the computers and users containers created by default and ... Passowords can only be set in a GPO at the ... Laptops ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer-Assigned Programs Cannot Be Deployed
    ... (this just a file server not a domain controller). ... (from a replication point-of-view): ... of the child domains that holds the source file for the packages. ... I have packages assigned to computers in both domains. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group policy to apply only to some workstations
    ... Gregg Hill wrote: ... the GPMC and clicked on SBSComputers, and there are no GPOs linked. ... I guess the next question would be "Why do the computers even need ... GPO) settings from applying to select computers? ...
    (microsoft.public.windows.server.sbs)