[THIN] Weird W2K3 GPO issues

From: "Steve Snyder" <kwajalein@xxxxxxxxx>
To: thin@xxxxxxxxxxxxx
Date: Tue, 1 Jul 2008 10:54:37 +1200

new build of W2K3R2, all current M$ patches. Server resides in an OU
blocking GPO inheritance, and I have a GPO applied to this OU with very
minimal settings for testing using loopback to force user settings. When I
logon with a dummy user account (my daily account :) ) the policy settings
don't apply (remove shutdown, disable CMD, etc.) but if I run a rsop.msc it
shows the settings as being applied. If I make my dummy account a local
admin on the box then the settings apply. I've enabled debugging and see
entries like

USERENV(16fc.15b4) 10:43:09:525 SetRegistryValue: DisableRegistryTools => 1
[OK]

and in the user's registry key
software\microsoft\windows\currentversion\policies\system the values are set
properly, they're just not working.

Any thoughts or ideas on whree to look next?

Follow-Ups:

[THIN] Re: Weird W2K3 GPO issues
From: Joe Shonk

[THIN] Weird W2K3 GPO issues

Other related posts: