RE: Group policy help needed!!!

From: Burak Bayoglu (bayoglu_at_uekae.tubitak.gov.tr)
Date: 12/09/04

  • Next message: Tim Watkins: "Secondary Storage Device Policy" 
    To: "'Peter Rodger'" <prodger2008@yahoo.com>, <focus-ms@securityfocus.com>
Date: Thu, 9 Dec 2004 19:50:41 +0200

    It is an expected result that not all the servers in the domain
    successfully apply the policy in a w2k active directory domain. but it
    is not normal when 0 of 70 servers apply the policy. Possibly the GPO
    could not be created or the servers get the policy list from a DC which
    did not replicate the new GPO yet. You can try to push a replication
    between the DCs and try secedit /refresh policy again. in addition to
    that, if it the policy contains "computer settings", server may need to
    be restarted to apply the new policy settigns. You can use gpresult to
    see if the policy has been applied or not. if you see it has been
    applied, the server may still need to be restarted.

    Burak BAYOGLU
    TUBITAK UEKAE
    Network Security
    Senior Researcher
    CISA, CISSP
    T: +90262-6481529
    F: +90262-6481100

    -----Original Message-----
    From: Peter Rodger [mailto:prodger2008@yahoo.com]
    Sent: Thursday, December 09, 2004 6:16 PM
    To: focus-ms@securityfocus.com
    Subject: Group policy help needed!!!

    Hi, all

    I pushed out audit policy and event log policy through
    group policy to all our servers (70). All server in
    the Servers OU.
    None of them got policy. I ran secedit many times.

    Can anyone point me why and the right direction?

    We are in windows 2K and XP environment.

    Thanks,

    Peter

                    
    __________________________________
    Do you Yahoo!?
    Yahoo! Mail - 250MB free storage. Do more. Manage less.
    http://info.mail.yahoo.com/mail_250

    ----------------------------------------------------------------
    -----------
    ----------------------------------------------------------------
    -----------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Tim Watkins: "Secondary Storage Device Policy"

    Relevant Pages

    • Re: Account Lockout threshold
      ... All are window 2000 advanced servers with Service pack 3, ... Domain Contoller Security Policy - Account lockout threshold ...
      (microsoft.public.security)
    • Re: Security templates and IUSR account log on locally
      ... the Enterprise security template for Member Servers breaks IIS6 anon ... the guideline is to apply the member servers baseline policy and then the ... web servers policy. ... You may also want to revisit the download for the W2k3 Security Guide as ...
      (microsoft.public.inetserver.iis.security)
    • Re: Preventing users from c onnecting to shares NOT on the domain..
      ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
      (microsoft.public.win2000.networking)
    • Re: Preventing users from c onnecting to shares NOT on the domain..
      ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
      (microsoft.public.win2000.security)
    • Re: Default Domain Controllers Policy
      ... I was only looking to change the Local Security Policy on servers that have ... appling to the Computers is if the Computer OU was inside the Default ... Why are you trying to change Local Settings? ...
      (microsoft.public.win2000.group_policy)