Re: GPO problem - now access denied

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 06/08/03


Date: Sun, 8 Jun 2003 10:26:05 -0700


You are going to need to narrow this down for us.
Which GPO ? Default Domain ?
And, when you say you removed the GPO what do
you mean, that you unlinked it from an AD container ?,
that you reversed some settings ?, that you returned
some settings to undefined ?, etc.
And, do you recall which categories of settings ?

"Nobody" <nobody@nobody.com> wrote in message
news:sav5ev4r5hcpikk24b4f334me4d68r4hdm@4ax.com...
>
>
> In a nutshell:
>
> I was playing with a domain GPO setting in my domain lab of 5
> computers. After removing the GPO I have the following problems.
>
> 1) EVENTVWR, PERFMON, REGEDT32 etc will not work remotely - get access
> denied. Yes, I am an admin with full rights and I can net share, net
> view and map a drive to IPC$.
>
> 2) DHCP client on Win2003 machines will not start - get access denied.
>
> 3) One of the machines that was off during all this works fine; I can
> use EVENTVWR and PERFMON with no problems.
>
>
> I'm really going in a million different directions with this. Any
> advice on this is welcome. What permissions were changed and how can I
> get them back?
>
> --Paul



Relevant Pages

  • RE: Mandatory TS user profiles... Admin rights
    ... Configuration" settings applied via GPOs linked to the OU container. ... Machine configurations within the GPO environment are global. ... This allows the admin group to log onto the server unobstructed by ...
    (microsoft.public.windows.terminal_services)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User Settings in the same GPO - this restricts your flexibility and can be confusing ... if you put the laptops' user accounts into a seperate OU from the desktops, then you can use loopback processing to apply different User Configuration settings to the laptops and desktops if you also seperate out the settings you want to be different into seperate GPOs ... User Configuration, Network, Offline Files, "Do not automatically make redirected folders available offline" prevents that from happening BEFORE redirecting any folders - its not retro active. ...
    (microsoft.public.windows.group_policy)
  • Re: Allow non-Administrator to view and terminate processes for all users
    ... programs" "right" under Security Settings, Local Policies, User Rights ... I verified using gpresult /v that the settings in the GPO had been applied ...
    (microsoft.public.windows.server.security)
  • Re: Loopback processing, roaming profiles, folder redirection for domain-member laptops
    ... I suggest not mixing Computer Settings and User ... Settings in the same GPO - this restricts your flexibility and can be ... Configuration settings to the laptops and desktops if you also ... User Configuration, Network, Offline Files, "Do not ...
    (microsoft.public.windows.group_policy)
  • Re: Getting desperate: GPO applying incorrectly, PLEASE HELP ME!!
    ... User and Computer settings a single GPO,. ... OU with the Terminal Server computer accounts, ... See in particular the section called "Group Policy Loopback ...
    (microsoft.public.windows.group_policy)

Quantcast