this one did not apply... (Access denied - or at least not allowed) USERENV(2b4.8cc) 14:44:20:225 ProcessGPO: ============================== USERENV(2b4.8cc) 14:44:20:225 ProcessGPO: Searching <cn={038331EF-E17D-43B4-8184-D01130F28111},cn=policies,cn=system,DC=cmhw m,DC=org> USERENV(2b4.8cc) 14:44:20:225 ProcessGPO: User does not have access to the GPO and so will not be applied. This one applied... but failed USERENV(2b4.8cc) 14:44:20:225 ProcessGPO: ============================== USERENV(2b4.8cc) 14:44:20:240 ProcessGPO: ============================== USERENV(2b4.8cc) 14:44:20:240 ProcessGPO: Searching <cn={BE30A467-35C2-43BF-84EF-0EE7DA67F51C},cn=policies,cn=system,DC=cmhw m,DC=org> USERENV(2b4.8cc) 14:44:20:240 ProcessGPO: User has access to this GPO. USERENV(2b4.8cc) 14:44:20:240 ProcessGPO: Found file system path of: <\\cmhwm.org\SysVol\cmhwm.org\Policies\{BE30A467-35C2-43BF-84EF-0EE7DA67 F51C}> USERENV(2b4.8cc) 14:44:20:240 ProcessGPO: Couldn't find the group policy template file <\\cmhwm.org\SysVol\cmhwm.org\Policies\{BE30A467-35C2-43BF-84EF-0EE7DA67 F51C}\gpt.ini>, error = 0x547. can you provide a gpresult /v > gp.txt file? Check that the GPO is linked to the OU where the user ID exists. Check the permissions of the GPO to ensure it is applied to the user or a group the user is a member of or is applied to authenticated users. Make sure the User ID has rights to any NTFS areas the GPO is referecing (logon script, application package, etc.) Doug Delaney GM Desktop Engineering Global Client Engineering GM 1075 W. Entrance Dr., MS 2B, Cube 2130 Auburn Hills, MI 48326 Lab: 248-365-9187 Tel: 248-754-7917 Pg: 248-870-0306 pager Mail: Doug.Delaney@xxxxxxx <mailto:Doug.Delaney@xxxxxxx> Note: The information in this email is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it is prohibited. ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 3:50 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: GP not applied Okay, here are userenv.log and gpedit.log. I'm looking at them as well, but please let me know what you see. As I've said before, I'm new to all this GPO stuff. I was really happy when it was working over here, I'd just like to know why it's not working now that I've moved the server. On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: You might try enabling verbose userenv logging on one of those problem users, and then post the results here. ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 12:17 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: GP not applied I had other test users (1-5) and they worked in the lab and are not now. Here's a strange one, if I log in as someone who is just a domain admin, the GPOs apply correctly. If I log in as a newly created user, nothing works. If I make that user a domain admin, nothing works. On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: So, are you saying that you had a DC on an isolated subnet and now its on your production network, and a client on that network that is part of that DC's domain is not getting user policy as expected? If so, then make sure that the GPOs you're trying to deliver are linked in such a way that the user test6 will process them. The fact that a domain admin account gets the policies tells me that the policies may not be linked to a place in your AD tree that test6 will get them. Darren ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto: gptalk-bounce@xxxxxxxxxxxxx <mailto:gptalk-bounce@xxxxxxxxxxxxx> ] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 11:41 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] GP not applied Hey folks, Well, I just moved the DC from the lab to the network and it no longer applies the GPOs. I can join the domain and log in with no problem, but the policies are not applied. If I run gpresult, I get "INFO: The user "CMHWM\test6" does not have RSOP data." Two things: One, I changed the domain server name. Two, I get the policies if I log in as a domain admin, but not as a user. Any ideas what I screwed up here? Thanks, Gray