Re: GPO Not Being Applied

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello Taz1972,

Policies apply to users and computers only. If they are in the OU where the policy is linked to you can use the security filtering. So the computers are not in the OU where the polciy is linked?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello,

I have server 2003 environment and have created a GPO where I want
certain computers to receive settings.

I have have created security groups and added the computers in there,
created the GPO and used security filtering (read and apply gp) so the
GPO only applies to this group of computers. But the problem is the
GPO is not being applied.

Strangely when I do a GP modelling I see the GPO under Applied GPO's
but when I do a RSoP the GPO is not there at all??

FYI - I do have the same computers added into other groups which are
also used for seperate GPO's, again using GP filtering, but would this
have some negative affect or not? Also, one of the machines in the
group is a DC which is inherting other GP's outside the DC policy, but
it is denying the GPO which I want to attach to it - reason is access
denied (security filtering) but how do I get the DC to accept this
policy because it accepts other policies ie default domain policy and
others above it?

Also I have a few WSUS GPO's - one using authenticated users in the
security filtering and another with a computers group which targets
specific computers which need to receive special WSUS settings than
the rest. Problem is these user and computer GP's are overlapping -
they are both being applied to some of the same machines. This also
means they are being sent to the wrong containers in WSUS client side
targetting.

I do not have the OU structure in place (political reasons) to move
objects around so I have to use GP filtering, which should in theory
work fine, but I'm getting the above issues.

Please can you offer some much needed advise?

Thanks,
Taher


.

Relevant Pages

  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying user object policy (filtering based on computer location)
    ... should have the GPO applied via loopback when logging into ... the computers in NY Desktops OU, ... I have a OU called "NY DESKTOPS" - I created a new policy and enabled Loopback processing mode. ...
    (microsoft.public.win2000.group_policy)
  • RE: Im falling my hairs with this domain gpo problem
    ... Where is the GPO linked? ... Do Authenticated users and Domain Computers have permissions to "Apply ... I'm having problem with a domain policy. ... only local security policy was showed in the gpresult log (for ...
    (Focus-Microsoft)
  • Re: cant override screen saver policy
    ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ... >> don't get this policy setting. ...
    (microsoft.public.win2000.group_policy)
  • FW: Im falling my hairs with this domain gpo problem
    ... Where is the GPO linked? ... Do Authenticated users and Domain Computers have permissions to "Apply ... I'm having problem with a domain policy. ... only local security policy was showed in the gpresult log (for ...
    (Focus-Microsoft)