[windows2000] Re: GPO not applied
- From: "Beckett, William \(Bill\)" <bill.beckett@xxxxxxxxxxxxx>
- To: <windows2000@xxxxxxxxxxxxx>
- Date: Fri, 12 May 2006 08:51:24 -0400
Could do the first, not the latter . Will give it a go
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Daniel Ensor
Sent: Friday, May 12, 2006 8:37 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Put a deny on the fat client or apply the policy to the server and not
the user?
Cheers
Dan
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Beckett, William
(Bill)
Sent: 12 May 2006 13:32
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Let me ask you this, is there a way, without using loopback, to have one
policy applied for a TS login but NOT have that policy applied when
logging into a fat client?
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sullivan, Glenn
Sent: Thursday, May 11, 2006 11:50 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
While I understand, I don't think it works that way.
Move the user's account to the OU itself. I bet it works then.
A user account will only have applied GPOs that are in it's direct path
up... i.e., each OU that the account itself is in, and the domain and
site.
Either that or set Loopback Processing in "Replace" or "Merge" mode in
that GPO.
But being in a group in the OU is not the same as membership in that
OU...
Glenn Sullivan, MCSE+I MCDBA
David Clark Company Inc.
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Beckett, William
(Bill)
Posted At: Thursday, May 11, 2006 8:23 AM
Posted To: Windows 2000
Conversation: [windows2000] Re: GPO not applied
Subject: [windows2000] Re: GPO not applied
They are user settings and the computer object is not in the OU, they
are logging in to a terminal server. There is a group in the OU and the
user is a member of the group. I do not want the settings to be applied
to the computer but rather a specific group of users.
-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sullivan, Glenn
Sent: Thursday, May 11, 2006 7:15 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Are the settings you are trying to apply User Settings or
Machine settings?
I noticed that you said that the User account is in the OU... is
the computer object there as well?
I believe that User settings will apply to all Users in the OU,
and Machine Settings will apply to all Computers in the OU.
HTH,
Glenn Sullivan, MCSE+I MCDBA
David Clark Company Inc.
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Beckett, William
(Bill)
Posted At: Wednesday, May 10, 2006 4:15 PM
Posted To: Windows 2000
Conversation: [windows2000] Re: GPO not applied
Subject: [windows2000] Re: GPO not applied
Yes linked. Yes using ADUC, right click on the OU, properties,
GPO tab, new (or add) GPO, security is read and apply to the specified
group and I'm at a loss.
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Daniel Ensor
Sent: Wednesday, May 10, 2006 11:36 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Sorry might be being obvious but you have linked the GP to the
OU?
The GPResult is normal as it refers to the local machine policy
which obviously from the result has not been configured.
Are you using the Management console?
Cheers
Dan
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Beckett, William
(Bill)
Sent: 10 May 2006 16:18
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Only a domain policy in place right now
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Dave stevens
Sent: Wednesday, May 10, 2006 10:21 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Is it possible that the gpo is been overriden or blocked by
another policy? what checking.
Ta
Dave
"Beckett, William (Bill)" <bill.beckett@xxxxxxxxxxxxx> wrote:
Yes. It shows the user as being a member of the group
but no details on the policy being applied or not applied. I've also
turned up the logging and in the userenv log it has the following:
USERENV(1088.1428) 08:24:00:287 GetGPOInfo: GPO Local
Group Policy doesn't contain any data since the version number is 0. It
will be skipped.
USERENV(1088.1428) 08:24:00:287 GetGPOInfo: Leaving
with 1
Not sure if this pertains to the GPO in question but
it's the only thing in the log which might be
________________________________
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Mark Lane
Sent: Tuesday, May 09, 2006 5:51 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: GPO not applied
Have you tried gpresult?
-----Original Message-----
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Beckett, William
(Bill)
Sent: Tuesday, May 09, 2006 12:13 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] GPO not applied
I have a test user with a GPO not being applied
and can't figure out why. The scenario is a user who is a member of a
group call TS_TEST and that group is in a test OU. A GPO has been
created for the test OU and applied only to the TS_TEST group. When the
user logs in, the domain policy is applied but the TS_TEST GPO is not.
What are the possible reasons? DNS checks out ok. Membership has been
double checked.
________________________________
How low will we go? Check out Yahoo! Messenger's low PC-to-Phone
call rates.
<http://us.rd.yahoo.com/mail_us/taglines/postman8/*http://us.rd.yahoo.co
m/evt=39663/*http://voice.yahoo.com>
Visit the new FDL web - site designed to serve you better-
http://www.fdl.co.uk This message has been sent from Fuerst Day
Lawson Ltd
and confirms that the email has been scanned and to the best of
our
knowledge is free from virus infection. The unauthorised use,
disclosure,
forwarding or copying of this message and any attachments is
strictly
prohibited. If you have received this message in error, please
email
moderator@xxxxxxxxx This message and any attachments, which are
confidential
and may be privileged, are for the use of the addressee(s) only.
The views
and opinions expressed in this email message are the author's
own and may
not reflect the views and opinions of Fuerst Day Lawson Ltd.
Other related posts:
