RE: Group policy help needed!!!

Wim_Remes_at_msp.be
Date: 12/15/04

  • Next message: Naranjo Mateos, Alfonso Pascual: "RE: Group policy help needed!!!" 
    To: <focus-ms@securityfocus.com>
Date: Wed, 15 Dec 2004 09:03:33 +0100

    you can use gpresult.exe to verify which policies are applied on the
    server. This allows you to rule out the following:
    a) there are no higher policies that overrule the policy on the OU.
    b) the policy might be applied and then there might be something wrong with
    the defined settings.
    c) maybe policy is applied to some servers and not to others, that may be
    the result of a misconfigured ACL on the policy.

    Are the servers directly in the OU where the policy is linked, maybe they
    are in sub-OU that has Block Policy Inheritance set.

    Regards,

     Wim Remes
    MCSE:Security

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Naranjo Mateos, Alfonso Pascual: "RE: Group policy help needed!!!"

    Relevant Pages

    • Re: Account Lockout threshold
      ... All are window 2000 advanced servers with Service pack 3, ... Domain Contoller Security Policy - Account lockout threshold ...
      (microsoft.public.security)
    • Re: Security templates and IUSR account log on locally
      ... the Enterprise security template for Member Servers breaks IIS6 anon ... the guideline is to apply the member servers baseline policy and then the ... web servers policy. ... You may also want to revisit the download for the W2k3 Security Guide as ...
      (microsoft.public.inetserver.iis.security)
    • Re: Preventing users from c onnecting to shares NOT on the domain..
      ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
      (microsoft.public.win2000.networking)
    • Re: Preventing users from c onnecting to shares NOT on the domain..
      ... First condition would be to set "Require Security" policy to "Restricted ... These computers could be excluded by IP address, ... > The servers might be located on the same subnet of some of the clients. ...
      (microsoft.public.win2000.security)
    • Re: Default Domain Controllers Policy
      ... I was only looking to change the Local Security Policy on servers that have ... appling to the Computers is if the Computer OU was inside the Default ... Why are you trying to change Local Settings? ...
      (microsoft.public.win2000.group_policy)