Re: Problem applying custom Group Policy

For the user being applied, two possibilities.

1) The user is in the ou where the gpo resides
2) You have loopback processing selected

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:un23iU8BHHA.144@xxxxxxxxxxxxxxxxxxxxxxx
Yes, the computer is in the OU. And the remouvable_storage.adm applies to
the computer configuration.
Besides, I have tested to make some settings in Computer Configuration (in
standard settings), both in the OU's GP and Local GP and are NOT applied.
But modifications made to User Configurations ARE applied.

WHY?

"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:OjxiDLxBHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
George,

Okay, thanks for the clarification....

Where do the computer account objects directly reside? The only right
answer is in the OU to which this GPO is linked! Is that the case?

Again, I would check to make sure that the .adm file applies to the
computer
configuration side of things. It *sounds* like this .adm file applies to
the user configuration side of things....

--
Cary W. Shultz
Roanoke, VA 24012

"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:eKAbh7wBHHA.1012@xxxxxxxxxxxxxxxxxxxxxxx
I attached this GP at the OU I have created. And yes this is win 2000
server.
I tested the same policy at LOCAL level, but still doesn't work. I mean
any
changes made to the LOCAL GP, in Computer Configuration doesn't work,
no
just this template. But, the changes in User Configuration ARE applied.



"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:%23sbaDgZBHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
Howdy,

I am going to jump in for a second...

I do not see this GPO being applied.....at what level did you link
this
GPO
(local, Site, Domain, OU, sub-OU, etc.)? Also, and this is just
thinking
out loud, does this .adm apply to Windows 2000 systems? That would be
something that I would check. You stated in your original post that
it
works is applied to the user side? and at the level "LOCAL"?

--
Cary W. Shultz
Roanoke, VA 24012


"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:%23K099pWBHHA.992@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for the quick answer. This is a Windows 2000 Environment so I
don't
have RSoP, I have gpresult.exe.
This is the result from this tool ran on a computer from the OU:



-------------------------------------------------------------------------
-
--
-------------------------------------------------------------
Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Saturday, November 11, 2006 at 10:17:18


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:



Domain Name: MOARA
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\BANCA2

The user is a member of the following security groups:

MOARA\Domain Users
\Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL


###############################################################

Last time Group Policy was applied: Saturday, November 11, 2006 at
08:31:53



###############################################################

Computer Group Policy results for:



Domain Name: MOARA
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MOARA\BANCA2$
MOARA\Domain Computers

###############################################################

Last time Group Policy was applied: Saturday, November 11, 2006 at
10:07:30
Group Policy was applied from: netsat.moara.local


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy


-------------------------------------------------------------------------
-
--
-------------------------------------------------------------

There are no messages in the Event Viewer in this computer. Is this
usefuil
for you?




"Paul Bergson [MVP-DS]" <pbergson@xxxxxxxxxxxxxxxxx> wrote in
message
news:uESlJ2MBHHA.4992@xxxxxxxxxxxxxxxxxxxxxxx
Have you tried running the RSoP against a computer in this OU to
help?
Are
there any messages in the Event Viewer on one of the machines in
the
OU?

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"George Gîta" <george@xxxxxxxxxxxxxx> wrote in message
news:u5ohRmKBHHA.4672@xxxxxxxxxxxxxxxxxxxxxxx
Hello everyone,
I have a problem applying a custom goup policy. This policy has
an
administrative template (removable_storage.adm), downloaded from
microsoft
wich blocks removable storage. I loaded in AD and nothing happens
to
the
computers in this OU.
I also tried to use this in a group policy on a local computer,
but
still
nothing.
In the local group policy, if I make a change in Computer
Configuration
nothing happens. Only if I make a change in User Configuration
changes
are
applied.
The problem is the removable_storage.adm is an Administrative
Template
for
Computer Configuration.

Why my settings in Computer Configuration are not applied?

Thanks in advance...



















.

Relevant Pages

  • Re: Using Group Policy to give install permission
    ... Group Policy is simply (well, ... Active Directory there is only one Organizational Unit: ... Your user account objects or computer account objects must directly reside ... in the Organizational Unit to which you linked the GPO. ...
    (microsoft.public.win2000.group_policy)
  • Re: Problem applying custom Group Policy
    ... I have tested to make some settings in Computer Configuration (in ... Microsoft Windows 2000 Operating System Group Policy Result ... Local Group Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: GPO Question
    ... Group Policy Processing ... As described earlier in this paper, Group Policy is processed in the ... Local Group Policy Object, ... Any domain-based GPO may be enforced by using the Enforce ...
    (microsoft.public.win2000.group_policy)
  • Re: Terminal Server GPO Issue
    ... The name of the OU where the GPOs should not be applied is: Citrix XP ... They both sit at the same level under an OU called Servers. ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ...
    (microsoft.public.windows.server.active_directory)
  • Re: policy for only two computers
    ... a setting in a Domain-linked GPO then the setting in the Domain-linked GPO ... what happens if there are conflicting settings at the same level? ... go to the Group Policy tab and click on the New... ... the Computer Configuration half and the User Configuration ...
    (microsoft.public.win2000.group_policy)