Are you, by any chance, accessing the server remotely? Is there policy in place that denies remote admin rights? Try blocking inheritance on the OU to see if it a current policy that is giving you the issue. Martin T. Hugo Network Administrator Hilliard City Schools Tel: 614-921-7102 Martin_Hugo@xxxxxxxx gptalk@xxxxxxxxxxxxx writes: >John- >Sounds like two different issues. You will get the "Ok to reboot" message >any time that certain client side extensions (e.g. Software Installation >or >Folder Redirection) need to run a foreground processing mode in order to >apply. > >On the 2nd issue, I'm not familiar with fport, so not sure I can answer >that >but I it is very possible that if your server was getting security policy >from a different OU, that moving it to the new OU would not automatically >undo that policy. Normally, security policy "tattoos" a machine unless you >explicitly countermand it with a new policy. > >Darren > >-----Original Message----- >From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On >Behalf Of jfvanmeter@xxxxxxxxxxx >Sent: Monday, April 16, 2007 10:52 AM >To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx >Subject: [gptalk] gpupdate question > >Hello Everyone, I have a question that I need help with. > >I have a memberserver Win2k3 SP1, that was placed in the wrong OU and got >my >Windows XP Group Policy. > >Then it was moved to the correct OU, and recieves the member server >policy. > >Every time I run "gpupdate /force" I get the following. Certain Computer >policies are enabled that can only run during startup. >ok to Reboot? (Y/N) > >Every time that I refresh group policy it wants to reboot, I see 1704 >events >that security policy in the group policy object has been applied >successfully. > >I've ran gpupdate as the local admin and as a domain admin. > >If I try to run fport on the server as either a local admin or a domain >admin I get the following error "You must have administrator privileges to >run fport - exiting...... > >The local admin account is in the administrators group, and the domain >admin >group is in the administrators group. > >Could this be a registry tattoo from the xp policy that got applied? any >thoughts? > >Thanks Everyone, take care and have fun --John > > > > >*********************** >You can unsubscribe from gptalk by sending email to >gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR >by logging into the freelists.org Web interface. Archives for the list >are available at //www.freelists.org/archives/gptalk/ >************************