Re: Aftermath of RDIRCMP.EXE?

Hi
What will happen is that the computers will be default created in the OU that you designate with REDIRCMP.

Regarding to the Default Policy GPO, you may have that Policy enforced (as already stated) or you're getting User definitions that don't apply to computers but to users. Some of those settings can only be undone with a new policy at Domain level with higher priority over the Default Domain policy (but that won't solve your problem because it would still apply to all users in the domain because some of those settings are applied to the accounts that are in the AD DB). For example password settings.

So the question is... What policies settings are you talking about?
--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

"Mygposts" <Mygposts@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:4432EA8A-3001-4B4A-AA24-6AFDA08D0899@xxxxxxxxxxxxxxxx
We are considering running this command so new machines will automatically go
into an ou with special policies if the tech forgets to precreate the
computer account in the correct OU.

However, we are concerned about side effects because we are using the
default Computers Container as a place to put machines that for whatever
reason need to be exempt from all Group Policies including the Default Domain
Policy.
We tried creating an OU and blocking group policy inheritance, but that does
not block the default domain policy, so we had to move the machines back into
the computers container.

What will happen to the machines that are being stored in the default
Computers Container after running the RDIRCMP.exe command?

.

Relevant Pages

  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automated logoff using Winexit.scr
    ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions granted: Authenticated Users: Read/Special ... test GPO linked to it trying to accomplish that and move a couple computers ...
    (microsoft.public.windows.group_policy)
  • Re: Aftermath of RDIRCMP.EXE?
    ... We are going to try creating a new OU, putting the machines in there, ... with Deny Read and Deny Apply Group Policy permissions on the Default Domain ... Ok, check the policy settings that you want (as I already said, some ... policies only work at domain level, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
Loading