Group Policy Problem

pts.
Tags:
DataCenter
Desktops
Management
Microsoft Windows
OS
Security
Servers
SQL Server
Hi all, Having some troubles getting a GPO to take effect (Windows 2000 sp4). Have a GPO at the domain level that is working fine. I have created a new OU under that for our users with laptops. After moving the appropriate computers into that group, the new policy seettings are not being applied. The domain level GPO does not have the no override setting enabled. Other OU's (citrix ou, etc) have their own GPO's that are working, just the new one i created is not working. Permissions look fine, and I'm not seeing any errors in the event viewer on the domain controllers. Any ideas on what I'm doing wrong? Caffeine hasn't helped today. Thanks, -Shawn

Answer Wiki

Thanks. We'll let you know when a new response is added.

Is the security filtering set to apply to this new OU?

Discuss This Question: 6  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Bud8N2K6
    Are all of the laptops XP? Have you tried looking at the RSOP on the laptops to see which policies they are getting? You might also take a look at implementing a WMI filter if all the laptops are the same.
    0 pointsBadges:
    report
  • Jcan123
    Remember that the computers need "apply group policy" and "Read" permissions on the GPO. Track down what is happening with GPResult command(I think it's in the Reskit for Win2k). Also be aware that slow network detection might be an issue. I don't really remember, but I think that below 512 k speed is considered slow default and then the clients won't process parts of GPO.
    0 pointsBadges:
    report
  • Shawnb
    Thanks for the replies. gpresult reports that the laptop policy IS being applied to the computer settings, but not to the user settings: COMPUTER SETTINGS ------------------ CN=WISEGUY,OU=Laptop OU,DC=dkl,DC=com Last time Group Policy was applied: 11/30/2005 at 9:53:00 AM Group Policy was applied from: gandalf.dkl.com Group Policy slow link threshold: 500 kbps Applied Group Policy Objects ----------------------------- Laptop Users Policy Default Domain Policy The following GPOs were not applied because they were filtered out ------------------------------------------------------------------- Local Group Policy Filtering: Not Applied (Empty) The computer is a part of the following security groups: -------------------------------------------------------- BUILTINAdministrators Everyone Debugger Users BUILTINUsers WISEGUY$ Domain Computers NT AUTHORITYNETWORK NT AUTHORITYAuthenticated Users USER SETTINGS -------------- CN=Shawn Beairsto,CN=Users,DC=dkl,DC=com Last time Group Policy was applied: 11/30/2005 at 9:53:00 AM Group Policy was applied from: gandalf.dkl.com Group Policy slow link threshold: 500 kbps Applied Group Policy Objects ----------------------------- Default Domain Policy The following GPOs were not applied because they were filtered out ------------------------------------------------------------------- Local Group Policy Filtering: Not Applied (Empty) The user is a part of the following security groups: ---------------------------------------------------- Domain Users Everyone mqm BUILTINAdministrators BUILTINUsers NT AUTHORITYINTERACTIVE NT AUTHORITYAuthenticated Users LOCAL domain mqm DnsAdmins DKLStaff Any reason why it would apply to the computer settings, but not the user settings?
    0 pointsBadges:
    report
  • Martili
    Has that portion of the GPO been disabled?
    0 pointsBadges:
    report
  • Shawnb
    No, both settings are enabled in the policy. Thanks.
    0 pointsBadges:
    report
  • Nickyxx9
    Hi, If your OU only contains the laptop computers, and not the users who are logging on to them, then only the computer settings will apply by default - the user isn't in that OU, so it doesn't get the policy. You can get round it by using loopback policy processing (under computer configurationadministrative templatesystemgroup policy). Set it to "merge" and it should add the user settings. Don't use "replace" unless you want to blast away all other user settings.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following