Re: GPO not being applied

Andreas wrote:
They all have USER privilages on their machines. No policy was applied
before. They used to be in a workgroup and this SBS domain was the
first to join and only those policies were applied. The same happens
for all users. However, I logged on 1 machine as administrator and
still, I couldn't write on a cd.

All services are started. I even started some other services that
have to do with RPC but nothing changed.

Not a default behaviour. Was this functional prior to the machines joining
the domain? How were they joined, btw?

I'd check the workstations installed software for third party add-ons that
disable this function and then review the local policy sets for these
machines relative to the removeable media settings. Remember Local Policy is
applied first.





"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in
message news:eDoldl8eJHA.2340@xxxxxxxxxxxxxxxxxxxxxxx
Hmmm:

afaik, there is nothing in SBS that prohibits a user from either of
the functions you suggest. If you have never done a gpo that
prohibits them, then could it be that they cannot do this because
they are limited users on their machines? Or, did you some time in
the past setup a universal policy that prohibits these actions. If
so, then you must revoke that policy, not try a new one to over
rule it. The RPC calls are strange though. Are there any events in the
logs
that show that any services are not running, or if you look directly
at services, and order them by "automatic" are there any that should
be started but are not?

--
Larry
Please post the resolution to your
issue so that others may benefit.


"Andreas" <ayiangoullis@xxxxxxxxxxx> wrote in message
news:%23ACdB84eJHA.1172@xxxxxxxxxxxxxxxxxxxxxxx
I have SBS2003. I got a request for the following 2 issues:
1) The users must be allowed to format their memory sticks on their
machines
2) The users must be allowed to write data on cds from windows
explorer. SBS has an OU with all users and I have a custom GPO bound to
that
OU. I configured that GPO with the following options:
A)
Computer Configuration/Windows Settings/Security Settings/Local
Policies/Security Options ==>
Devices: Allowed to format and eject removable media:
Administrators and Interactive Users

B)
User Configuration/Administrative Templates/Windows
Components/Windows Explorer:
Remove CD Burning features: Disabled

- Refreshed client policy, even restarted, the user still has no
rights to
format memory stick and cannot copy file to cd folder
- Then, I moved the computer into the managed computers OU and
applied the
same GPO to that computers OU. (Didn't help)
- I even enabled GP Loopback but still doesn't work.
- I tried running the Resultant Set but I get RPC server
unavailable. (I get
this for all PCs Anyone knows why?)

Am I doing something wrong?

--
/kj


.

Relevant Pages

  • Re: Implementing Terminal server lockdown for remote users on SBS
    ... The issue I have is that if we apply a GPO to the ... lockdown policy we use is very limiting to the end user and denies ... All Users profile? ... only ever use the SBS network using the Remote Web Workplace ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO not being applied
    ... They all have USER privilages on their machines. ... They used to be in a workgroup and this SBS domain was the first to join and only those policies were applied. ... did you some time in the past setup a universal policy that prohibits these actions. ... SBS has an OU with all users and I have a custom GPO bound to that OU. ...
    (microsoft.public.windows.server.sbs)
  • Re: Implementing Terminal server lockdown for remote users on SBS
    ... The issue I have is that if we apply a GPO to the TScomputers OU, ... necessary shortcuts for the apps they will use as the lockdown policy we use ... only ever use the SBS network using the Remote Web Workplace ... individual profile and the Policy ...
    (microsoft.public.windows.terminal_services)
  • Re: Controlling User Policy via Computer account
    ... > (1 and 2 are adding grants of read/apply in the GPO security) ... > 4 place the machines in the OU to which this GPO is linked ... Even with the Loopback policy, ...
    (microsoft.public.windows.group_policy)
  • Re: SFS / Local / Group policy
    ... File and Print sharing not enabled on certain machines. ... policy is through the use of setting up the local policy and then this ... I have looked at all policies being pushed down and none push 'Guest ... "Is your GPO being applied? ...
    (microsoft.public.windows.server.active_directory)
Loading