[windows2000] SV: Re: SV: GPO problem

From: "Svein Arild Haugum" <svein@xxxxxxxxxxxxxx>
To: <windows2000@xxxxxxxxxxxxx>
Date: Tue, 25 May 2004 18:12:25 +0200
Verify that you have set the correct settings on the correct policy object.
 
This setting is ONLY read from the domain root level. So if you set this on 
another level, it will not be applied.
Also check that this is not set on two seprate policy object at this level. And 
that there is noe filtering set incorrect on the policy object in question.
 
Also, check the local security policy on the Domain Controllers, to see what 
settings are applied. (secpol.msc) and verify this against the GPO you try to 
edit.
 
Mvh 
Svein Arild 
-----Opprinnelig melding-----
Fra: Puetz, Christoph [mailto:christoph.puetz@xxxxxxxxxxx]
Sendt: 25. mai 2004 16:23
Til: 'windows2000@xxxxxxxxxxxxx'
Emne: [windows2000] Re: SV: GPO problem


Just did that with
 
secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce
 
but does not make a difference. I also reset the default domain GPO to refresh 
every 5 minutes on the DCs. The wrong settings are still attached to something.
 
Christoph

  _____  

From: windows2000-bounce@xxxxxxxxxxxxx 
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Svein Arild Haugum
Sent: Tuesday, May 25, 2004 8:00 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] SV: GPO problem


That setting is not applied to the clients.
 
This is applied to the domain controllers, its them who manage domain password. 
The only place they read password policyes is form the domain root level, where 
you have the default domain policy.
 
Try to refresh the policy on the domain controllers.
 
Mvh 
Svein Arild 
-----Opprinnelig melding-----
Fra: Puetz, Christoph [mailto:christoph.puetz@xxxxxxxxxxx]
Sendt: 25. mai 2004 15:50
Til: 'windows2000@xxxxxxxxxxxxx'
Emne: [windows2000] GPO problem


We're dealing with a really weird GPO problem. The password policy got changed 
in the default domain GPO. This was not supposed to happen and the changes have 
been reversed due to problems with some clients and 3rd party software.
 
However - even with forcing replication and forcing gpupdate on the clients, 
numerous reboots - the settings still apply to the clients.
 
Any idea what is holding on to the wrong GPO settings and how that can be 
cleared out?
 
Windows 2000 AD Domain - mixed mode.
 
Christoph

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
[windows2000] SV: Re: SV: GPO problem

Other related posts:
