RE: Group Policy - System Services is not being applied
- From: v-chayan@xxxxxxxxxxxxxxxxxxxx ("Charles Yang [MSFT]")
- Date: Wed, 05 Oct 2005 01:22:55 GMT
Hi,
Thanks for letting us know that you have resolved the problem, I am sorry
for not offer a "Gave solutions".
For the question you concerns, I will answer it one by one:
1. SBS OU
Generally speaking, SBS is different with other Windows server, the AD on
SBS 2003 is special designed. On SBS 2003, we use many wizard such client
computer wizard server computer wizard and add user wizard, when you use
these wizard to create account, the account will be put in special OU, if
the OU is not exist or be renamed, the wizard will failed. So if you want
to recreate SBS OU, you need to make sure that all the OU is same as
default SBS setting. On SBS 2003, we use only My business OU specially for
SBS wizard.
So it is your best interest to make sure that the OU structure is same as
the default SBS 2003.
2. Group Policy issue:
SBS Group Policy is different with Windows 2003, just as you said SBS 2003
implement many default group policies which will help you manage the SBS
domain more easily. In order to let SBS group policy work more effectively,
we recommend you implement domain group policy or domain controller group
policy by changing default domain policy and domain controller policy. If
you want to implement to deploy to special OU, it is your best interest to
implement in a new policy and apply it to OU, it might stop some unexpected
interruption. For your convenience, I would like to give you an article
about implement group policy on Windows 2003 domain.
Deploy Group policy
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/DepKi
t/c75e3e6f-c322-4220-b205-46c6e9ba7674.mspx
Thanks again for your effort on this issue. I am glad to be of assistance.
Please feel free to use this newsgroup. Hope the above information helpful.
Best regards,
Charles Yang (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Group Policy - System Services is not being applied
| thread-index: AcXI8yPFMUCwiCWNT3SwuXlGHyoT4g==
| X-WBNR-Posting-Host: 84.9.14.125
| From: "=?Utf-8?B?VGhlIExhenkgU2x1Zw==?="
<TheLazySlug@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <000B3FA9-2F17-419A-8A6A-693D0EAC051F@xxxxxxxxxxxxx>
<N6X85g8xFHA.768@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Group Policy - System Services is not being applied
| Date: Tue, 4 Oct 2005 07:51:45 -0700
| Lines: 165
| Message-ID: <FB382A2F-79B7-459A-B1A7-954DC0221C66@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:158587
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Charles
|
| Thanks for coming back to me on my problem. I had a look at the documents
| you suggested, however they did not help. However they did give me an
idea.
|
| I moved my users and computers out of the OUs in the 'MyBusiness' OU,
| deleted the Group Policies that were applied within the 'MyBusiness' OU
and
| recreated the SBS OU structure.
|
| After restoring the Group Policies from a backup and moving my users and
| computers back, I have found everything is working properly.
|
| For your information, neither the server or the workstations were
reporting
| any errors in the event logs, before I recreated the OUs
|
| I just have one question left. Do you know whether my recreation of the
SBS
| OUs is likely to cause any problems with any of the wizards or possible
| future patches ?
| I'm sure that's a bit of a tricky question, but your best guess would be
| appreciated - I won't hold you to it :-)
|
| Oh, and one final one, if you don't mind.
| I use one large group policy to apply most of my settings for the
| workstations and users, then a few small ones to apply settings for each
| department. Would spliting the large group policy into say 20-25 smaller
| policies delay the start up of computers or the logging on of users
much.(The
| reason that I ask is that the policies that are automatically created by
the
| SBS seem to be more in this style and certainly easier to manage, but I
just
| wanted to check for any downside before changing anything)
|
| Many Thanks and Kind Regards
|
| ""Charles Yang [MSFT]"" wrote:
|
| > HI,
| >
| > Welcome to SBS 2003 newsgroup.
| >
| > Issue description:
| > ===============
| >
| > I understand that you encountered problem to allow all user on the
client
| > computer to start stop or pause a services that run on the local
clients.
| >
| > Analyzing and suggestions:
| > ================
| >
| > Generally speaking, we can run group policy to control the system
services
| > on the client computer, I am not sure if you have followed the right
steps
| > to configure it, you can refer to KB article below to configure it.
| >
| > 324802 How To Configure Group Policies to Set Security for System
Services
| > in
| > http://support.microsoft.com/?id=324802
| >
| > We also have another workaround for this issue, you can refer to the KB
| > article below:
| >
| > 325349 HOW TO: Grant Users Rights to Manage Services in Windows Server
2003
| > http://support.microsoft.com/?id=325349
| >
| > Please note that only if you configure it apply to all domain client,
the
| > policy will be assigned to domain policy, please note that the policy
will
| > be effective only when you logon to domain. Please note that the policy
| > will be effective after a logon and log off, you can also run gpupdate
on
| > the command line to update the policy manually.
| >
| > If the issue still exists, please help check the event view on the SBS
| > server to see if there are any error messages related to group policy
| > apply.
| >
| > I appreciate your effort on this issue, please feel free to post back
any
| > of your progress. I am glad to be of assistance.
| >
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Group Policy - System Services is not being applied
| > | thread-index: AcXGYXqvZhzVIMInSeKx0U4Ej1a13w==
| > | X-WBNR-Posting-Host: 86.133.98.166
| > | From: "=?Utf-8?B?VGhlIExhenkgU2x1Zw==?="
| > <TheLazySlug@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Group Policy - System Services is not being applied
| > | Date: Sat, 1 Oct 2005 01:24:02 -0700
| > | Lines: 17
| > | Message-ID: <000B3FA9-2F17-419A-8A6A-693D0EAC051F@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:157893
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Morning All,
| > |
| > | I am trying to allow my users to start/stop/pause a service on their
| > | computers. The service runs on the SBS2003 (SP1) server as well. In
all
| > cases
| > | it runs under the Local System account.
| > |
| > | All of my users run with 'users' permissions.
| > |
| > | I've gone to the group policy > computer configuration > Windows
Settings
| > >
| > | System Services and tried adjusting the permission there, but it is
| > having no
| > | affect.
| > | (Not only can't I change the permissions, changing the startup
setting is
| > | having no effect either.)
| > |
| > | Is there another setting or something I'm missing ????
| > |
| > | Many Thanks
| > |
| >
| >
|
.
- Prev by Date: Re: Port 110 /// "local cache"
- Next by Date: Re: Setting up the Shared Fax
- Previous by thread: SBS2003 CD #5 #6 PRODUCT KEY
- Next by thread: Re: Setting up the Shared Fax
- Index(es):
Relevant Pages
|
