Re: Applying GPO on Active directory

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/27/05

  • Next message: Steven L Umbach: "Re: Computer does not remove from domain"
    Date: Mon, 26 Sep 2005 20:14:16 -0500
    
    

    The first thing to check is that the user or computer is within the scope of
    management of the Group Policy depending on if you are implementing user or
    computer configuration or both. In other words you said that you created an
    OU with a Group Policy linked to it. Then you need to make sure that the
    user and/or computer accounts that you want the GP applied to are in that OU
    [or possibly child OU] and that the GPO has read/apply allow permissions in
    it's properties/security for those users/computers which by default would be
    the authenticated users group. Another reason for GP not applying is
    improper DNS configuration in the domain. Review the link below on how DNS
    MUST be configured. Use the tool gpresult on a computer that is not
    receiving the settings you expect to see what Group Policies are being
    applied to the computer/user, from what domain controller , and that last
    time they were applied. Also use Event Viewer to check the logs on your
    domain computers and domain controllers to see if their are any related
    Event IDs recorded that may be helpful in fixing your problem. --- Steve

    http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382

    "daniel hernandez" <daniel hernandez@discussions.microsoft.com> wrote in
    message news:5C1A9DF9-C2F7-45CE-BBE0-C1F4D1F8022D@microsoft.com...
    > Guys , please your suggests !!
    >
    > It is regarding apply GPO on Active directory. The PDC has the policy
    > inplemented and "running".. that not the other servers hosted in the
    > domain.
    > I've tried many things...:
    > 1.-Force those policies on local (it shows ok , but says "not
    > inplemented")
    > 2.- Create an OU and link it to the GPO.
    >
    > I have restart the servers (both sides), login as local and domain
    > administrator...just lack to remove thos e servers...
    >
    > Do you have any suggest to try?
    >
    > thanks in advance for your help
    > Daniel


  • Next message: Steven L Umbach: "Re: Computer does not remove from domain"

    Relevant Pages

    • Re: Help with GPO problem! PLEASE!!
      ... How do I create a new GPO? ... I am racking my brain on this problem with a Windows 2003 Standard ... >> Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
      (microsoft.public.windows.group_policy)
    • Re: policy for only two computers
      ... a setting in a Domain-linked GPO then the setting in the Domain-linked GPO ... what happens if there are conflicting settings at the same level? ... go to the Group Policy tab and click on the New... ... the Computer Configuration half and the User Configuration ...
      (microsoft.public.win2000.group_policy)
    • GPOStatus
      ... > guid and select properties/security to see and manage security on a GPO. ... I am racking my brain on this problem with a Windows 2003 Standard ... >> Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
      (microsoft.public.windows.group_policy)
    • Re: Help with GPO problem! PLEASE!!
      ... Can you create a new GPO?? ... If so use it to compare permissions to the two ... > Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
      (microsoft.public.windows.group_policy)
    • Re: policy for only two computers
      ... Configuration of this policy (my understanding I do not ... >Since you have never done Group Policy before please ... if there is a Site GPO that has a particular setting ... what happens if there are conflicting settings at ...
      (microsoft.public.win2000.group_policy)