Re: Group Policies

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Laura E. Hunter \(MVP\) (hunter(nospamplease)_at_sfs.upenn.edu)
Date: 06/17/04


Date: Thu, 17 Jun 2004 15:13:47 -0400

Windows 2000 or 2003? In 2003, you can use the Resultant Set of Policies
MMC snap-in to give a graphical look at which GPOs are being applied, and
which setting is "winning" if there are multiple GPOs involved.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rsop.mspx

2000 can do something similar using the gpresult.exe command-line utility.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

-- 
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only
"screwielouie" <anonymous@discussions.microsoft.com> wrote in message 
news:1d78001c45470$621db180$a601280a@phx.gbl...
> Hi,
>
> I have a single domain with two sites.  I have a domain
> policy and two separate site policies.  They are all
> applying nicely but with just one problem.  I have groups
> like Domain_Controllers etc.  I have deny apply policy to
> the group Domain_Controllers but the policy is still
> applying.  Could it be because the policies are
> conflicting?  Is there a utility to see what is going on?
> Any help would be appreciated...
>
> SL
> 


Relevant Pages

  • Re: _Group Policy only 1 of 6 is working
    ... Do you have ANY block policy inheritance on the OUs? ... GPOs are empty... ... I am a domain admin and these policies are not working for me ...
    (microsoft.public.win2000.group_policy)
  • Re: Changes to default Group Policy
    ... I am already using GPMC to manage GPOs. ... Policy and Default Domain Controllers Policy was first created? ... settings, I find comparing manually to be very time consuming. ... if there was a tool that I could use that would compare the default policies ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy and Windows 2003
    ... There are settings in the Administrative Templates area that "force" ... even if the gpos have not changed. ... >> crack open the domain security policy (off of the Start menu, ... go to the Account Policies: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best Practice
    ... differ in the recommended approach e.g. many recommend having fewer 'large' gpos rather than processing many gpos though the microsoft internal IT document recommends having many gpos for the flexibility benefits. ... Well, it is not the number of Group Policy being applied that slow down startup and logon, but the number of Client Side Extensions used in those policies. ...
    (microsoft.public.windows.group_policy)
  • Re: SBS 2008 - "Exchange E-Mail address policy cannot be configured"...
    ... I verified all of that and do not see any policies that would cause ... Check Exchange 2003 policies" part of the following SBS ... " The Exchange E-mail address policy cannot be configured. ... ONLY Mailbox Manager policies and do not define e-mail addresses ...
    (microsoft.public.windows.server.sbs)