GPO Not Being Applied

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello,

I have server 2003 environment and have created a GPO where I want certain
computers to receive settings.

I have have created security groups and added the computers in there,
created the GPO and used security filtering (read and apply gp) so the GPO
only applies to this group of computers. But the problem is the GPO is not
being applied.

Strangely when I do a GP modelling I see the GPO under Applied GPO's but
when I do a RSoP the GPO is not there at all??

FYI - I do have the same computers added into other groups which are also
used for seperate GPO's, again using GP filtering, but would this have some
negative affect or not? Also, one of the machines in the group is a DC which
is inherting other GP's outside the DC policy, but it is denying the GPO
which I want to attach to it - reason is access denied (security filtering)
but how do I get the DC to accept this policy because it accepts other
policies ie default domain policy and others above it?

Also I have a few WSUS GPO's - one using authenticated users in the security
filtering and another with a computers group which targets specific computers
which need to receive special WSUS settings than the rest. Problem is these
user and computer GP's are overlapping - they are both being applied to some
of the same machines. This also means they are being sent to the wrong
containers in WSUS client side targetting.

I do not have the OU structure in place (political reasons) to move objects
around so I have to use GP filtering, which should in theory work fine, but
I'm getting the above issues.

Please can you offer some much needed advise?

Thanks,
Taher


.

Relevant Pages

  • Re: Block Group Policy Settings Based on Group Membership
    ... Perhaps the issue here is that this security filtering means that, ... users and computers who are targeted by a GPO, ... Let's say I have a GPO linked to the ...
    (microsoft.public.win2000.group_policy)
  • Re: Using loopback and group filtering together
    ... My GPO (Remove Authenticated Users, filtered by My Workstations Group, ... (one can just use Domain Computers as replacement for Authenticated ... When I removed filtering by the group containing the computer objects, ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy to apply only to some workstations
    ... Another alternative is to leave the computers where they are, link the relevant GPO to that OU, and use security filtering to apply it only to the relevant client PCs. ...
    (microsoft.public.windows.server.sbs)
  • Re: Active Directory Folders
    ... >> I'm certainly not going to discount a book published by Microsoft ... >> replace the computers and users containers created by default and ... Passowords can only be set in a GPO at the ... Laptops ...
    (microsoft.public.windows.server.active_directory)
  • Re: Using loopback and group filtering together
    ... the GPO, I would use -both- Authenticated Users and MyWorkstations group. ... The computers to apply the GPO need read/apply, ... For filtering you need to define what computers and what users. ... understand how this interacts with a later loopback processing, ...
    (microsoft.public.windows.group_policy)