Re: Group Policy Problem

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/25/05

  • Next message: Steven L Umbach: "Re: catching a hacker?"
    Date: Thu, 24 Feb 2005 22:20:46 -0600
    
    

    Group Policy will only apply to domain users and those domain users must be
    within the scope of influence of the Group Policy. In other words if you
    configure a Group Policy for am OU with user configuration, then the user
    accounts must exist in that OU or a child OU. You can use the gpresult tool
    while logged on as one of those users or a test user with the same policy
    applied to see what Group Policies are being applied to the user and
    computer, from which domain controller and the last time the policy was
    applied. Also make sure that the user configuration portion of the Group
    Policy is enabled. --- Steve

    http://support.microsoft.com/default.aspx?scid=kb;en-us;321709 -- gpresult

    "Know1" <Know1@nowhere.gone> wrote in message
    news:OKhqcFsGFHA.3092@tk2msftngp13.phx.gbl...
    >I have a problem with my W2K workstations not processing group policy
    > past the "Default Domain Policy". I have set up organizational units as
    > follows.
    >
    > ourdomain.local --> Contains the "Default Domain Policy"
    > Accounts
    > - Accounting
    > - Admins
    > - General Purpose
    > - Managers
    > - Production
    > - Purchasing
    > - Sales --> Contains "Sales Group Policy" (Let
    > salespersons be local admins to their W2k workstations using restricted
    > groups)
    > Builtin
    > Computers
    > Domain Controllers --> Contains "Default Domain Controllers Policy"
    > ForeignSecurityPrinciples
    > Resources
    > - Admin Consoles
    > - Exempt
    > - Printers
    > - Servers
    > - Workstations --> Contains the "Workstation Group
    > Policy" (Under Computer Configuration, set DNS server via VBS script, Use
    > internal Software Updates server) (Under User Configuration, disable
    > access
    > to a: & b: Drives.)
    > Users
    >
    >
    > The problem I'm having is only the "Default Domain Policy" settings are
    > applied (both Computer Settings and User Settings). The "Workstation Group
    > Policy" processes only the "Computer settings" section of the group
    > policy.
    > Why is the "User Settings" Section of the "Workstation Group Policy" not
    > being applied? How could I troubleshoot this issue.
    >
    > Thank you in advance,
    >
    > Mike...
    >
    >
    >
    >
    >


  • Next message: Steven L Umbach: "Re: catching a hacker?"

    Relevant Pages

    • Re: Intermittant GPO failure to apply
      ... If you have backup your group policy before, you can restore it from the ... 244474 How to force Kerberos to use TCP instead of UDP in Windows Server ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • Re: Set GPO for specific user group
      ... Click on the domain name in Group Policy Management, select the GPO and then click the arrow to the left to move it to the top of the list ... Filtering: Denied ...
      (microsoft.public.windows.server.sbs)
    • RE: Remote Assistance not working
      ... I have tried these settings you recommend with no results. ... I have yet to get the offer remote assistance to work when launched from the ... The Group Policy on the computer of the novice user must be configured ... Start the Microsoft Management Console Group Policy snap-in. ...
      (microsoft.public.windows.server.sbs)
    • RE: Group Policy Connundrum - Stick with it, its confusing!!!
      ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ... Import the current Content Ratings Settings: ...
      (Security-Basics)
    • Re: Block Policy Inheritance does not work
      ... Make sure the policies you are trying to block are "user configuration". ... not block "computer configuration" policy on a per user basis. ... >> troubleshooting Group Policy problems. ...
      (microsoft.public.win2000.group_policy)