Re: GPO not picking up computer settings

Double check the permissions for the default domain GPO. Look in it's
properties/security and you should see both read and apply for authenticated
users and no groups by default should have any deny permissions. If for some
reason that does not help try creating a new GPO and link it to the domain
container, move it to the top of the list, define the password/account policy
settings to be what you want, run Gpupdate again, and then check the results
with net accounts. Also make sure that block inheritance is NOT enabled on the
domain controller container. --- Steve



"Jarryd" <j@xxx> wrote in message
news:eC6xs%23JXGHA.1476@xxxxxxxxxxxxxxxxxxxxxxx
Hi Steve and Roger,

I don't know what on earth is going on here. Now I am being told that the
Default Domain Policy is being denied because of Security Filetering. but I
haven't done anything to the security settings. I was going to but was
waiting for a reply on this forum before I started fiddling. This really is
getting silly. I have run GPUpdate on both DCs. If I check the settings of
the Default Domain Policy everything is set the way that it should be. I
haven't changed the permissions. So why is it still picking up these stupid
settings. It doesn't make much sense.

Please help.

TIA,

Jarryd

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:ON1MaIlWGHA.1192@xxxxxxxxxxxxxxxxxxxxxxx
Those users are domain accounts or machine local accounts ??

"Jarryd" <j@xxx> wrote in message
news:eM248rYWGHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
OK, I have managed to get the GP Management tool to pick up the settings
and it says that it is applying them in the way that I want them to on
the machine and user against which I ran the test. I went in to the
Local Policy and it has picked up the settings. But when I try to change
there password it lets me do it with less characters that required, it is
not picking up the history of old passwords, and it isn't enforcing
complexity. I really don't understand this.

Please help!!

Jarryd

"Jarryd" <j@xxx> wrote in message
news:e8T1EbYWGHA.5012@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have created a Group Policy for remote users. The only settings I
have configured are the ones that pertain to passwords and account
lockout. I have moved those users to an OU that is linked to the new
GP, but the settings weren't taking affect. So I generated a report and
it came back saying the policy was empty. But that's just wrong. If I
go in and configure user settings those are picked up, but the computer
settings aren't. Why?

TIA,

Jarryd









.

Relevant Pages

  • Re: Automated logoff using Winexit.scr
    ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions granted: Authenticated Users: Read/Special ... test GPO linked to it trying to accomplish that and move a couple computers ...
    (microsoft.public.windows.group_policy)
  • Re: USERENV error - Group Policy
    ... However, as per instructions, I've set these permissions correctly. ... policy object in AD. ... folder and GPO, returning the security to normal settings, did another GP ... -Domain controllers have the read and apply rights to the Domain Controllers ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automated logoff using Winexit.scr
    ... Permissions on Existing Subkeys" radio button, ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions(Set Value and Create Subkey) on This key and subkeys. ...
    (microsoft.public.windows.group_policy)
  • Re: File perms & group policy problem
    ... >> I think you have the solution already, which is to force policy ... >> The worst case scenario is that you have the settings open for 90 ... >>> I'm setting the file permissions on some files on a PC using the ... >>> alongside the software installation then the file's don't get their ...
    (microsoft.public.windows.group_policy)
  • Re: USERENV error - Group Policy
    ... -Domain controllers have read/apply on DC policy (this policy includes the ... -SYSVOL share/NTFS permissions are set correctly (inc. special permissions ... -I've also examined the SMB signing settings, ...
    (microsoft.public.windows.server.active_directory)