Re: Computer-Assigned Programs Cannot Be Deployed

Okay,

Was thinking about this incorrectly. Was looking at it from a completely
wrong way. The GPO is an object, like everything else. So, of course it is
available to other domains. Just might take a bit of time to process.

--
Cary W. Shultz
Roanoke, VA 24012

"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:%23L4i9AaKGHA.500@xxxxxxxxxxxxxxxxxxxxxxx
Kevin,

So it is possible for computers or users in one Domain to fall under the
Scope of Management of a GPO that was created in another Domain? Even if
all of the trusts and Share/NTFS Permissions are correct?

I guess the real question that I am asking is that the GPO that is created
in child1 will appear in the list if you go to an OU (let's just look at
the OU-level here) in another Domain and right click it, select
Properties, go to the Group Policy tab and hit the "Add" button?

So, I guess that would make my reply partially correct and partially
incorrect. How it works inside the Domain is correct (I am pretty sure of
this) but that it does not work between domains is incorrect.

I hate it when I am wrong but love to learn. I will not make this mistake
again. I will play with it in the lab.

But, wouldn't this be somewhat slow?

--
Cary W. Shultz
Roanoke, VA 24012

"Kevin D. Goodknecht Sr. [MVP]" <admin@xxxxxxxxxxxxxx> wrote in message
news:er13OnZKGHA.216@xxxxxxxxxxxxxxxxxxxxxxx
Mo_Naji wrote:
I have an empty root domain and 2 child domains. I have a file server
in one of the child domains that holds the source file for the
packages. Users and computer accounts from both child domains have
access permissions to the share. I have packages assigned to
computers in both domains. Assigned programs only get installed on
the computers that are in the same domain where the file server is
located. If I make the server member of the other domain it will only
work on the computers from that domain, it's not a DNS issue.
I saw KB274274 but I am under the same forest but different child
domains. The easy solution is to put a file server for the packages
in each domain, I am trying to avoid that only last resort solution.
( I hope I explained my sitution)
Thanks.

You say you checked share permissions, how about NTFS permissions on the
source folder?
Share permissions are not the same as NTFS permissions they are separate
and
which ever one is the most restricted is used.
Domain Computers from each domain the package is installed to must have
read
and execute NTFS permissions. The soucre computer need not be in the same
domain, as long as a trust is set up and ALL permissions are right.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================






.