RE: Group policy not applied
- From: guyg <guyg@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri, 20 Jul 2007 05:50:03 -0700
Thanks for the info, I will not be able to test this until July 24th when we
go back to this site. I will let you know what happens.
Thanks again,
Guy
"Terence Liu [MSFT]" wrote:
Hello Customer,.
Thank you for posting here.
According to your description, I understand that one workstation cannot
apply the SBS user GPO when one domain user logon it. If I have
misunderstood the problem, please don't hesitate to let me know.
First, please let me know that:
1. If you logon this workstation with another regular user, does the GPO
apply success?
2. If you logon another workstation with this regular user, does the GPO
apply success?
Based on my research, I suggest we try the following steps to see if we can
resolve this issue:
I. Since the issue happen only on one client computer, please try to make
it disjoin domain and rejoin domain to test this issue:
1. Disjoin domain: Right click My Computer->Properties->Computer Name
tab->Change button->Select Workgroup->click OK twice and reboot it.
2. Delete the computer account from SBS domain: SBS->Server Management
console->Client Computers, delete the computer account.
3. Rejoin domain thru connectcomputer wizard on client.
4. Test this issue.
II. Do clean boot on the client to narrow down this issue:
To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.
b. In the System Configuration Utility (MSConfig) window, click to select
the Selective Startup button.
c. Click to clear the check mark from the "Load startup items" below
Selective Startup.
d. Click the Services tab, click to check the "Hide All Microsoft Services"
box, and remove all the check marks from the remained Non-Microsoft
Services.
e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.
f. After restarting, please check whether this issue will reoccur.
g. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.
III. I suggest we check the GPO settings for this user account:
Please open ADUC (Active Directory Users and Computers) on SBS, ensure the
problematic user account in the same OU with the good user account.
IV. If this issue happen only when a specific user login to a specific
client computer, I think this user's profile on this computer is corrupted.
I suggest we try to recreate this user profile on this computer:
1. Please logon this computer with local administrator
2. Extend to C:\Documents and Settings, backup the folder for the
problematic user account.
3. Right click My Computer, select properties
4. Select Advanced tab, click Settings button under "User Profiles"
5. Highlight the problematic user account, click Delete button, click Yes
to delete.
6. Click OK twice
7. Restart the computer to logon the user account to test this issue.
If we cannot resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:
1. Save the application event log and system event log as evt files on the
problematic machine and send to my mailbox: v-terliu@xxxxxxxxxxxxx
2. Please run command "gpresult /v >c:\gpresult.txt" on problematic machine
when logon regular user and send file c:\gpresult.txt to me.
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Group policy not applied
| thread-index: AcfKYcOhU8Y6C6UbS9Wwy37/pICbOw==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?Z3V5Zw==?= <guyg@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Group policy not applied
| Date: Thu, 19 Jul 2007 17:06:04 -0700
| Lines: 134
| Message-ID: <8B291EE5-9714-49FF-AF03-881866E7AADE@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:51484
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Have a work station that GPO is not being applied to a user on the work
| station.
| If I log in as an admin it works fine. But if I log on as a regular user
no
| GPO applied,
| No My documment redirection and disabled desktop properties.
| Here is the info from gpresult:
|
| C:\Documents and Settings\sally>gpresult
|
| Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
| Copyright (C) Microsoft Corp. 1981-2001
|
| Created On 7/19/2007 at 10:52:15 AM
|
|
| RSOP results for LDVLAW\sally on LDV-5 : Logging Mode
| ------------------------------------------------------
|
| OS Type: Microsoft Windows XP Professional
| OS Configuration: Member Workstation
| OS Version: 5.1.2600
| Domain Name: LDVLAW
| Domain Type: Windows 2000
| Site Name: Default-First-Site-Name
| Roaming Profile:
| Local Profile: C:\Documents and Settings\sally
| Connected over a slow link?: No
|
|
| COMPUTER SETTINGS
| ------------------
| CN=LDV-5,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=ldvlaw,DC=local
| Last time Group Policy was applied: 7/19/2007 at 10:51:40 AM
| Group Policy was applied from: ldv-server.ldvlaw.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| Default Domain Policy
| Small Business Server Remote Assistance Policy
| Small Business Server Lockout Policy
| Small Business Server Domain Password Policy
| Small Business Server Windows Firewall
| Small Business Server Client Computer
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server - Windows Vista policy
| Filtering: Denied (WMI Filter)
| WMI Filter: Vista
|
| Small Business Server Folder Redirection
| Filtering: Not Applied (Empty)
|
| Small Business Server Internet Connection Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PreSP2
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| The computer is a part of the following security groups:
| --------------------------------------------------------
| BUILTIN\Administrators
| Everyone
| BUILTIN\Users
| NT AUTHORITY\NETWORK
| NT AUTHORITY\Authenticated Users
| LDV-5$
| Domain Computers
|
|
| USER SETTINGS
| --------------
| CN=sally,CN=Users,DC=ldvlaw,DC=local
| Last time Group Policy was applied: 7/19/2007 at 10:51:40 AM
| Group Policy was applied from: ldv-server.ldvlaw.local
| Group Policy slow link threshold: 500 kbps
|
| Applied Group Policy Objects
| -----------------------------
| Default Domain Policy
| Small Business Server Folder Redirection
| Small Business Server Client Computer
|
| The following GPOs were not applied because they were filtered out
| -------------------------------------------------------------------
| Small Business Server Windows Firewall
| Filtering: Not Applied (Empty)
|
| Small Business Server - Windows Vista policy
| Filtering: Denied (WMI Filter)
| WMI Filter: Vista
|
| Small Business Server Domain Password Policy
| Filtering: Not Applied (Empty)
|
| Small Business Server Lockout Policy
| Filtering: Disabled (GPO)
|
| Small Business Server Internet Connection Firewall
| Filtering: Denied (WMI Filter)
| WMI Filter: PreSP2
|
| Small Business Server Remote Assistance Policy
| Filtering: Disabled (GPO)
|
| Local Group Policy
| Filtering: Not Applied (Empty)
|
| The user is a part of the following security groups:
| ----------------------------------------------------
| Domain Users
| Everyone
| Offer Remote Assistance Helpers
| BUILTIN\Users
| BUILTIN\Administrators
| NT AUTHORITY\INTERACTIVE
| NT AUTHORITY\Authenticated Users
| LOCAL
| Access to USB
| Group Policy Creator Owners
| Domain Admins
| Enterprise Admins
| SBS Report Users
| Schema Admins
| SBS Mobile Users
| Offer Remote Assistance Helpers
|
| C:\Documents and Settings\sally>
|
| Networking ok!
|
| Thanks,
|
- Follow-Ups:
- RE: Group policy not applied
- From: Terence Liu [MSFT]
- RE: Group policy not applied
- References:
- Group policy not applied
- From: guyg
- RE: Group policy not applied
- From: Terence Liu [MSFT]
- Group policy not applied
- Prev by Date: RE: Event ID 538 540 and 576
- Next by Date: Re: SBS2003 std SP1 DNS issue
- Previous by thread: RE: Group policy not applied
- Next by thread: RE: Group policy not applied
- Index(es):
Relevant Pages
|
