RE: Group policy not applied

Hello Guy,

Thank you for your kind update.

Please feel free to take your time.

I was just writing to say that I hope everything is going well.

If there's anything else I can do for you, please do not hesitate to let me
know.

Thank you and have a nice day,

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Group policy not applied
| thread-index: AcfKzH2FFoFfDOdtS66rcUNREWRtGA==
| X-WBNR-Posting-Host: 207.46.19.168
| From: =?Utf-8?B?Z3V5Zw==?= <guyg@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <8B291EE5-9714-49FF-AF03-881866E7AADE@xxxxxxxxxxxxx>
<oXr172pyHHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Group policy not applied
| Date: Fri, 20 Jul 2007 05:50:03 -0700
| Lines: 298
| Message-ID: <913C914A-5644-4C25-99B4-0A6A38858D38@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:51584
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thanks for the info, I will not be able to test this until July 24th when
we
| go back to this site. I will let you know what happens.
| Thanks again,
| Guy
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello Customer,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that one workstation cannot
| > apply the SBS user GPO when one domain user logon it. If I have
| > misunderstood the problem, please don't hesitate to let me know.
| >
| > First, please let me know that:
| >
| > 1. If you logon this workstation with another regular user, does the
GPO
| > apply success?
| > 2. If you logon another workstation with this regular user, does the
GPO
| > apply success?
| >
| > Based on my research, I suggest we try the following steps to see if we
can
| > resolve this issue:
| >
| > I. Since the issue happen only on one client computer, please try to
make
| > it disjoin domain and rejoin domain to test this issue:
| >
| > 1. Disjoin domain: Right click My Computer->Properties->Computer Name
| > tab->Change button->Select Workgroup->click OK twice and reboot it.
| >
| > 2. Delete the computer account from SBS domain: SBS->Server Management
| > console->Client Computers, delete the computer account.
| >
| > 3. Rejoin domain thru connectcomputer wizard on client.
| >
| > 4. Test this issue.
| >
| > II. Do clean boot on the client to narrow down this issue:
| >
| > To clean boot the problematic computer, please use the steps below:
| > a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
| > (without the quotation marks). Click OK.
| >
| > b. In the System Configuration Utility (MSConfig) window, click to
select
| > the Selective Startup button.
| >
| > c. Click to clear the check mark from the "Load startup items" below
| > Selective Startup.
| >
| > d. Click the Services tab, click to check the "Hide All Microsoft
Services"
| > box, and remove all the check marks from the remained Non-Microsoft
| > Services.
| >
| > e. Click OK to close the MSConfig window. Click Yes when you are asked
to
| > restart your computer in order to enable the changes.
| >
| > f. After restarting, please check whether this issue will reoccur.
| >
| > g. If there are no more problems, please use the above steps to enable
| > services and startup items one by one in order to figure out the root
cause
| > of this issue.
| >
| > III. I suggest we check the GPO settings for this user account:
| >
| > Please open ADUC (Active Directory Users and Computers) on SBS, ensure
the
| > problematic user account in the same OU with the good user account.
| >
| > IV. If this issue happen only when a specific user login to a specific
| > client computer, I think this user's profile on this computer is
corrupted.
| > I suggest we try to recreate this user profile on this computer:
| >
| > 1. Please logon this computer with local administrator
| >
| > 2. Extend to C:\Documents and Settings, backup the folder for the
| > problematic user account.
| >
| > 3. Right click My Computer, select properties
| >
| > 4. Select Advanced tab, click Settings button under "User Profiles"
| >
| > 5. Highlight the problematic user account, click Delete button, click
Yes
| > to delete.
| >
| > 6. Click OK twice
| >
| > 7. Restart the computer to logon the user account to test this issue.
| >
| > If we cannot resolve the issue after we perform the above steps, please
| > kindly help me collect some information for further investigation:
| >
| > 1. Save the application event log and system event log as evt files on
the
| > problematic machine and send to my mailbox: v-terliu@xxxxxxxxxxxxx
| >
| > 2. Please run command "gpresult /v >c:\gpresult.txt" on problematic
machine
| > when logon regular user and send file c:\gpresult.txt to me.
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Group policy not applied
| > | thread-index: AcfKYcOhU8Y6C6UbS9Wwy37/pICbOw==
| > | X-WBNR-Posting-Host: 207.46.192.207
| > | From: =?Utf-8?B?Z3V5Zw==?= <guyg@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Group policy not applied
| > | Date: Thu, 19 Jul 2007 17:06:04 -0700
| > | Lines: 134
| > | Message-ID: <8B291EE5-9714-49FF-AF03-881866E7AADE@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:51484
| > | NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Have a work station that GPO is not being applied to a user on the
work
| > | station.
| > | If I log in as an admin it works fine. But if I log on as a regular
user
| > no
| > | GPO applied,
| > | No My documment redirection and disabled desktop properties.
| > | Here is the info from gpresult:
| > |
| > | C:\Documents and Settings\sally>gpresult
| > |
| > | Microsoft (R) Windows (R) XP Operating System Group Policy Result
tool
| > v2.0
| > | Copyright (C) Microsoft Corp. 1981-2001
| > |
| > | Created On 7/19/2007 at 10:52:15 AM
| > |
| > |
| > | RSOP results for LDVLAW\sally on LDV-5 : Logging Mode
| > | ------------------------------------------------------
| > |
| > | OS Type: Microsoft Windows XP Professional
| > | OS Configuration: Member Workstation
| > | OS Version: 5.1.2600
| > | Domain Name: LDVLAW
| > | Domain Type: Windows 2000
| > | Site Name: Default-First-Site-Name
| > | Roaming Profile:
| > | Local Profile: C:\Documents and Settings\sally
| > | Connected over a slow link?: No
| > |
| > |
| > | COMPUTER SETTINGS
| > | ------------------
| > |
CN=LDV-5,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=ldvlaw,DC=local
| > | Last time Group Policy was applied: 7/19/2007 at 10:51:40 AM
| > | Group Policy was applied from: ldv-server.ldvlaw.local
| > | Group Policy slow link threshold: 500 kbps
| > |
| > | Applied Group Policy Objects
| > | -----------------------------
| > | Default Domain Policy
| > | Small Business Server Remote Assistance Policy
| > | Small Business Server Lockout Policy
| > | Small Business Server Domain Password Policy
| > | Small Business Server Windows Firewall
| > | Small Business Server Client Computer
| > |
| > | The following GPOs were not applied because they were filtered out
| > |
-------------------------------------------------------------------
| > | Small Business Server - Windows Vista policy
| > | Filtering: Denied (WMI Filter)
| > | WMI Filter: Vista
| > |
| > | Small Business Server Folder Redirection
| > | Filtering: Not Applied (Empty)
| > |
| > | Small Business Server Internet Connection Firewall
| > | Filtering: Denied (WMI Filter)
| > | WMI Filter: PreSP2
| > |
| > | Local Group Policy
| > | Filtering: Not Applied (Empty)
| > |
| > | The computer is a part of the following security groups:
| > | --------------------------------------------------------
| > | BUILTIN\Administrators
| > | Everyone
| > | BUILTIN\Users
| > | NT AUTHORITY\NETWORK
| > | NT AUTHORITY\Authenticated Users
| > | LDV-5$
| > | Domain Computers
| > |
| > |
| > | USER SETTINGS
| > | --------------
| > | CN=sally,CN=Users,DC=ldvlaw,DC=local
| > | Last time Group Policy was applied: 7/19/2007 at 10:51:40 AM
| > | Group Policy was applied from: ldv-server.ldvlaw.local
| > | Group Policy slow link threshold: 500 kbps
| > |
| > | Applied Group Policy Objects
| > | -----------------------------
| > | Default Domain Policy
| > | Small Business Server Folder Redirection
| > | Small Business Server Client Computer
| > |
| > | The following GPOs were not applied because they were filtered out
| > |
-------------------------------------------------------------------
| > | Small Business Server Windows Firewall
| > | Filtering: Not Applied (Empty)
| > |
| > | Small Business Server - Windows Vista policy
| > | Filtering: Denied (WMI Filter)
| > | WMI Filter: Vista
| > |
| > | Small Business Server Domain Password Policy
| > | Filtering: Not Applied (Empty)
| > |
| > | Small Business Server Lockout Policy
| > | Filtering: Disabled (GPO)
| > |
| > | Small Business Server Internet Connection Firewall
| > | Filtering: Denied (WMI Filter)
| > | WMI Filter: PreSP2
| > |
| > | Small Business Server Remote Assistance Policy
| > | Filtering: Disabled (GPO)
| > |
| > | Local Group Policy
| > | Filtering: Not Applied (Empty)
| > |
| > | The user is a part of the following security groups:
| > | ----------------------------------------------------
| > | Domain Users
| > | Everyone
| > | Offer Remote Assistance Helpers
| > | BUILTIN\Users
| > | BUILTIN\Administrators
| > | NT AUTHORITY\INTERACTIVE
| > | NT AUTHORITY\Authenticated Users
| > | LOCAL
| > | Access to USB
| > | Group Policy Creator Owners
| > | Domain Admins
| > | Enterprise Admins
| > | SBS Report Users
| > | Schema Admins
| > | SBS Mobile Users
| > | Offer Remote Assistance Helpers
| > |
| > | C:\Documents and Settings\sally>
| > |
| > | Networking ok!
| > |
| > | Thanks,
| > |
| >
| >
|

.

Quantcast