Re: Computer-Assigned Programs Cannot Be Deployed

Mo_Naji,

I think that you were very clear. I think that it is I who was not clear
(with the concepts involved here as I was thinking about only one thing).

As Kevin stated it should be possible to have a GPO that resides in one
domain be available to other domains (so long as the appropriate trusts are
in place). And, remember - as I am sure that you know - having the
appropriate trusts in place means nothing without the proper
NTFS/Permissions behind them.

I am sorry for the initial incorrect response. I was thinking of the
replication of the GPO, not the linking and application (don't ask me why!)
.. So, while it is not really recommended (I did a little bit of research
after Kevin's reply....it got me thinking) it is indeed possible. It might
simply be slow. But it should work!

Have you used any of the troubleshooting tools to look at this? Can you use
RSoP? How about GPResult? I have not done this in awhile (well, I am sure
that was clear) so I am trying to catch up quickly. Sorry that I can not
give you the answer. Does this link help?

http://www.windowsnetworking.com/articles_tutorials/Resultant-Set-Policy-Queries-GPRESULT.html

--
Cary W. Shultz
Roanoke, VA 24012
"Mo_Naji" <MoNaji@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AADD6AC4-8DA7-40A7-A1A9-BB3AC52BF917@xxxxxxxxxxxxxxxx
Cary
Thanks for your response, maybe I did not clarify, I have GPO's on each
domain, and the policies on both domains point to the same share on the
server. (this just a file server not a domain controller). So the only
thing
that I am trying to share between the two domains is the server hosting
the
source files for the software installation.
Yes I am using GPMC great tool.
Thanks.

"Cary Shultz" wrote:

Mo_Naji,

I am pretty sure that you can not have one GPO in one domain apply either
to
the user-configuration side or to the computer configuration side in
other
domains.

This is by design. Consider how this works. There are two parts to a
GPO
(from a replication point-of-view): the GPC and the GPT. The GPC (Group
Policy Container) is replicated via the Domain Naming Context (or, Domain
Partition). This is replicated only to Domain Controllers in the same
Domain. The GPT (or Group Policy Templates) is replicated via the
SYSVOL.
This, also, would happen only to Domain Controllers in the same Domain.

Now, have you considered using the GPMC (Group Policy Management Console)
and copying this GPO to the 'other' child domain? You would just have to
make sure that you changed the appropriate 'things' (such as
dc=child1,dc=yourdomain,dc=com to child2,dc=yourdomain,dc=com). I have
not
done this as I am just now playing with the 'latest and greatest' (which
clearly indicates that I am about three years behind!).

Maybe someone else can chime in with a solution that I am overlooking (or
simply do not know).


--
Cary W. Shultz
Roanoke, VA 24012

"Mo_Naji" <MoNaji@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:F5373176-B41C-4ECB-901E-9104B994E8BD@xxxxxxxxxxxxxxxx
I have an empty root domain and 2 child domains. I have a file server in
one
of the child domains that holds the source file for the packages. Users
and
computer accounts from both child domains have access permissions to
the
share. I have packages assigned to computers in both domains. Assigned
programs only get installed on the computers that are in the same
domain
where the file server is located. If I make the server member of the
other
domain it will only work on the computers from that domain, it's not a
DNS
issue.
I saw KB274274 but I am under the same forest but different child
domains.
The easy solution is to put a file server for the packages in each
domain,
I
am trying to avoid that only last resort solution. ( I hope I explained
my
sitution)
Thanks.





.

Relevant Pages

  • Re: Computer-Assigned Programs Cannot Be Deployed
    ... (this just a file server not a domain controller). ... (from a replication point-of-view): ... of the child domains that holds the source file for the packages. ... I have packages assigned to computers in both domains. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer-Assigned Programs Cannot Be Deployed
    ... There are two parts to a GPO ... (from a replication point-of-view): ... of the child domains that holds the source file for the packages. ... I have packages assigned to computers in both domains. ...
    (microsoft.public.windows.server.active_directory)
  • GPO software install doesnt work
    ... When I wan tto install software by GPO I ... Computers after Domain Controler's replication of course just ... Even if i will restart my Domain controler all computers in domain are not ...
    (microsoft.public.windows.group_policy)
  • Server not accessible, network path was not found
    ... We have a peer-to-peer network of 8 Win2kPro computers with one acting as the ... some not) are unable to connect to the file server which was one of those ... I click on Windows Explorer in My Network Places ... selecting "Use NetBIOS setting from DHCP" as well as "Enable NetBIOS over ...
    (microsoft.public.win2000.networking)
  • Re: [OT] Video Driver box
    ... At this point I have 4 computers - a linux file server, ... How's Ubuntu working out for ya? ... Isn't the whole point of a file server to do file storage? ...
    (rec.arts.anime.misc)