Re: Allow remote administration exception policy does not apply

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/24/05 

Date: Mon, 24 Oct 2005 14:32:43 -0500

Make sure that the computers are within the scope of management of the Group
Policy. In other words the computers must be in the container/OU where the
GPO is linked to or a child container, etc. Try running the Resultant Set of
Policy mmc snapin on one of the Windows 2003 domain controllers in both
logging and planning mode to see what is reported as what policy is being
applied. Planning mode shows what should apply if everything is working as
it should and logging mode shows that actual policy that has been applied.
You can also run RSOP locally via the mmc snapin on the XP Pro computer.
The GPO needs to be linked to the container where you want it applied to and
authenticated users would need read/apply permissions to the GPO which is
the default setting. --- Steve

"Pierrot Robert" <mcthepro_at_hotmail.com> wrote in message
news:OjMskwK2FHA.1564@tk2msftngp13.phx.gbl...
> Hi,
>
> I have created a GPO for my domain with the "allow remote administration
> exception" policy enabled for the Windows Fireall domain profile.
>
> However, the policy does not apply to the computers in the domain. The
> exception never displays in the Windows Firewall settings. All computers
> are Windows XP SP2 and the DC are 2003/2000.
>
> I have other GPOs for the same domain (disable system restore, etc.) and
> they work well.
>
> I tried to enable this policy in the "Default Domain Policy" object, in
> both "Domain Profile" and "Standard Profile" and it did not make it.
>
> Any idea ?
>

Relevant Pages

  • Re: Organizational Units
    ... I have done group policy for some time this way by ... >Unit and place either user account objects and /or ... >Security Groups to filter the GPO, ... >'users' (remember that this is a container and that you ...
    (microsoft.public.win2000.active_directory)
  • Re: GPO Problems
    ... The computer configuration part belongs to computers and the user configuration part to the user, so depending on the settings you must have the accounts located there. ... If rsop.msc or gpresult /v logged on with a user account doesn't give any output there can be additional problems with GPO applying belomging to DNS confgiruration or slow links between sites. ... Only the password policy an account lockout policy have to bet set on ...
    (microsoft.public.windows.server.active_directory)
  • Re: Reinstall everytime assigned applications through GPO on start
    ... Software installation extension has been called for background policy refresh ... Stations - R&D Software (EMEA computers). ... Stations - R&D Software (EMEA computers) is set for installation because it ... The assignment of application Remote Administrator v2.1 from policy Software ...
    (microsoft.public.windows.group_policy)
  • Re: Applying user object policy (filtering based on computer location)
    ... should have the GPO applied via loopback when logging into ... the computers in NY Desktops OU, ... I have a OU called "NY DESKTOPS" - I created a new policy and enabled Loopback processing mode. ...
    (microsoft.public.win2000.group_policy)
  • RE: Im falling my hairs with this domain gpo problem
    ... Where is the GPO linked? ... Do Authenticated users and Domain Computers have permissions to "Apply ... I'm having problem with a domain policy. ... only local security policy was showed in the gpresult log (for ...
    (Focus-Microsoft)