Re: Problem applying custom Group Policy

Yes, the computer is in the OU. And the remouvable_storage.adm applies to
the computer configuration.
Besides, I have tested to make some settings in Computer Configuration (in
standard settings), both in the OU's GP and Local GP and are NOT applied.
But modifications made to User Configurations ARE applied.

WHY?

"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:OjxiDLxBHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
George,

Okay, thanks for the clarification....

Where do the computer account objects directly reside? The only right
answer is in the OU to which this GPO is linked! Is that the case?

Again, I would check to make sure that the .adm file applies to the
computer
configuration side of things. It *sounds* like this .adm file applies to
the user configuration side of things....

--
Cary W. Shultz
Roanoke, VA 24012

"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:eKAbh7wBHHA.1012@xxxxxxxxxxxxxxxxxxxxxxx
I attached this GP at the OU I have created. And yes this is win 2000
server.
I tested the same policy at LOCAL level, but still doesn't work. I mean
any
changes made to the LOCAL GP, in Computer Configuration doesn't work, no
just this template. But, the changes in User Configuration ARE applied.



"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:%23sbaDgZBHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
Howdy,

I am going to jump in for a second...

I do not see this GPO being applied.....at what level did you link this
GPO
(local, Site, Domain, OU, sub-OU, etc.)? Also, and this is just
thinking
out loud, does this .adm apply to Windows 2000 systems? That would be
something that I would check. You stated in your original post that it
works is applied to the user side? and at the level "LOCAL"?

--
Cary W. Shultz
Roanoke, VA 24012


"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:%23K099pWBHHA.992@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for the quick answer. This is a Windows 2000 Environment so I
don't
have RSoP, I have gpresult.exe.
This is the result from this tool ran on a computer from the OU:



-------------------------------------------------------------------------
-
--
-------------------------------------------------------------
Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Saturday, November 11, 2006 at 10:17:18


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:



Domain Name: MOARA
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\BANCA2

The user is a member of the following security groups:

MOARA\Domain Users
\Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL


###############################################################

Last time Group Policy was applied: Saturday, November 11, 2006 at
08:31:53



###############################################################

Computer Group Policy results for:



Domain Name: MOARA
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MOARA\BANCA2$
MOARA\Domain Computers

###############################################################

Last time Group Policy was applied: Saturday, November 11, 2006 at
10:07:30
Group Policy was applied from: netsat.moara.local


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy


-------------------------------------------------------------------------
-
--
-------------------------------------------------------------

There are no messages in the Event Viewer in this computer. Is this
usefuil
for you?




"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
news:uESlJ2MBHHA.4992@xxxxxxxxxxxxxxxxxxxxxxx
Have you tried running the RSoP against a computer in this OU to
help?
Are
there any messages in the Event Viewer on one of the machines in the
OU?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:u5ohRmKBHHA.4672@xxxxxxxxxxxxxxxxxxxxxxx
Hello everyone,
I have a problem applying a custom goup policy. This policy has an
administrative template (removable_storage.adm), downloaded from
microsoft
wich blocks removable storage. I loaded in AD and nothing happens
to
the
computers in this OU.
I also tried to use this in a group policy on a local computer,
but
still
nothing.
In the local group policy, if I make a change in Computer
Configuration
nothing happens. Only if I make a change in User Configuration
changes
are
applied.
The problem is the removable_storage.adm is an Administrative
Template
for
Computer Configuration.

Why my settings in Computer Configuration are not applied?

Thanks in advance...

















.

Relevant Pages

  • Re: Group Policy to allow stopping a service
    ... I do not want non-Domain Admins to stop services on DC. ... I went to Group Policy and under Computer Configuration> Windows Settings> System Services I modified the service I wanted and added Domain Users with Stop, Start, pause rights. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Policy Update Using Remote Registry Edit
    ... Keep in mind that domain profile settings apply only when domain computer ... You can edit local Group Policy remotely by selecting the mmc ... find it always best to edit Group Policy instead of registry settings. ... Is there a way to remotely edit the local group policy of a Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Software Restriction Policies
    ... If you applied it via Group Policy at the domain or Organizational Unit ... default security level to unrestricted or unlink the GPO that is applying ... the settings to the user or computer depending on where the policy is being ... applied - user or computer configuration. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Using "Group" Policy with workgroup PCs
    ... Local Group Policy applies to all users that logon to the computer as you ... > I am trying to utilse them within a workgroup of about 30 XP Pro PCs. ... > Start Menu settings) I would be able to have different settings for ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy to allow stopping a service
    ... That app shouldn't even be installed on the DC if you ask me ... I went to Group Policy and under Computer Configuration> Windows Settings> System Services I modified the service I wanted and added Domain Users with Stop, Start, pause rights. ...
    (microsoft.public.windows.server.active_directory)