Re: GPO Problems

Hello Smiten,

You have to make sure that computers and comupters are in the OU where the GPO is linked to. The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there.

If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites.

So please run on a machine which is in the OU where you linked a GPO with a user account that also belongs to it "gpresult /v >c:\gpresult.log" in a command prompt and post the output here.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Dear Friend,

I have created by that way only, One OU named of my Company, and
Sub OUs of department. and under those Sub OUs, i have created Users
and Groups... i had all the computers into default Computers folder
than
i moved into individual Sub OUs where the user belongs to.
Then after i created New policies for each Sub OUs and linked it with
existing one. I edited newly created Policy and enabled some
restrictions from Administrative Task from User Configuration, but
whenever i log on with any of the user name on client pc. it did not
reflect anything.

Ex. If i enabled Remove Run from Start menu from Administrative
Templates of User Configuration, It should reflect on client pc
whenever any users log on. but i tested all user on diff client pc,
none of them had run disabled.

I have tried to enforced all GPO one by one to check whether it works
or not. even i tried other trouble shooting, but none worked for me.

I never had this kind of problem, infect i used to do this in my home
company since more than 4 months. and i formatted server more than 3
time and created Domain.. but never had such problem... whatever
restriction i applied was reflecting.. but this time i m just screwed
up..

any way, thank for your help Meinolf Weber

Smiten
www.cfotechsolutions.com
'Meinolf Weber [MVP-DS Wrote:

;4616901']Hello Smiten,

Keep this both as they are, as defaults. Do not change them, so in
case
of
problems you can go back to state where most settings are functioning
in
case some problems occur with new configured GPOs.
To use GPOs you should reflect your company structure in it's own OU
with
subOUs for user accounts and computer accounts. This way you can
create
GPOs
for your needs.
Only the password policy an account lockout policy have to bet set on
domain
level, so you can create a new GPO on domain level for your neeeds.
Password/account GPO on linked OU will NOT work, when machines are
connected
to the domain.
For different password/account policies you have to use 2008 or
higher
with
functional levels set to windows serevr 2008. Or you maybe have to
find
some
3rd party tools.
Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Dear Friends

I have installed Win server 2003 standard edition on my Domain
Controller. I am confused about Group Policy as there are two

policies

in the Administrative Tools.

1 - Domain Controller Security Policy
2 - Domain Security Policy
I have 1 Domain Controller, 3 Organizational Unit, and more than 15
Users
If I want to control Computer Configuration and User Configuration I
need to open it with MMC and GP Object editor, but I am confuse

about

which policy should be edited?

I just wanted to write down my company name in Windows Internet
Explorer, I went to administrative templates of User Configuration

and

given my company name in IEM. But it?s not reflecting on any client
pc. I also tried other settings from Administrative templates, but
none of them is reflecting on client side. I have used both the

policy

and edited one by one but none of them is applying any kind of
restriction on client pc.

I have also tired to create new Group Policy but it did not work for
me. I have installed GPMC and tried to do the same thing using GPMC
but again failed. I got stuck now don?t know what?s wrong I did, any
help would be appreciated and useful for me.

Thanks in advance.

Smiten
www.cfotechsolutions.com
**
http://forums.techarena.in
http://forums.techarena.in



.

Relevant Pages

  • Re: More than one GPO on the same OU
    ... How does the Group Policy 'No Override' and 'Block Inheritance' work? ... NO OVERRIDE option of a GPO ... > COMPUTER CONFIGURATION ... [Christoffer Andersson] ...
    (microsoft.public.win2000.group_policy)
  • Re: Complex GPO Configuration Issue
    ... I have read a lot of posts and articles on loopback processing and have used ... If you enforce a policy then it will override all other polices in the path ... to the user/computer unless another GPO closer to the user/computer is also ... What I'm getting for user configuration is ...
    (microsoft.public.windows.group_policy)
  • Re: Complex GPO Configuration Issue
    ... The user settings are definitely enabled on the policy in question. ... pushing GPO to do something it was never intended to do. ... > Loopback processing is computer configuration. ...
    (microsoft.public.windows.group_policy)
  • Re: Log Off, Disconnect, but no Shutdown
    ... Block Policy Inheritance on the OU. ... Move the Terminal Server Computer Objects into the OU. ... Create a GPO called “TS Machine Policy” linked to the OU ... Check “Disable Computer Configuration settings” on these GPO ...
    (microsoft.public.windows.terminal_services)
  • Re: Applying user object policy (filtering based on computer location)
    ... should have the GPO applied via loopback when logging into ... the computers in NY Desktops OU, ... I have a OU called "NY DESKTOPS" - I created a new policy and enabled Loopback processing mode. ...
    (microsoft.public.win2000.group_policy)
Loading