[gptalk] Re: gpupdate question

  • From: "Martin Hugo" <Martin_Hugo@xxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Tue, 17 Apr 2007 07:38:05 -0400

Are you, by any chance, accessing the server remotely?  Is there  policy
in place that denies remote admin rights?  Try blocking inheritance on the
OU to see if it a current policy that is giving you the issue.

Martin T. Hugo
Network Administrator
Hilliard City Schools
Tel: 614-921-7102

gptalk@xxxxxxxxxxxxx writes:
>Sounds like two different issues. You will get the "Ok to reboot" message
>any time that certain client side extensions (e.g. Software Installation
>Folder Redirection) need to run a foreground processing mode in order to
>On the 2nd issue, I'm not familiar with fport, so not sure I can answer
>but I it is very possible that if your server was getting security policy
>from a different OU, that moving it to the new OU would not automatically
>undo that policy. Normally, security policy "tattoos" a machine unless you
>explicitly countermand it with a new policy.
>-----Original Message-----
>From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
>Behalf Of jfvanmeter@xxxxxxxxxxx
>Sent: Monday, April 16, 2007 10:52 AM
>To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
>Subject: [gptalk] gpupdate question
>Hello Everyone, I have a question that I need help with.
>I have a memberserver Win2k3 SP1, that was placed in the wrong OU and got
>Windows XP Group Policy. 
>Then it was moved to the correct OU, and recieves the member server
>Every time I run "gpupdate /force" I get the following. Certain Computer
>policies are enabled that can only run during startup.
>ok to Reboot? (Y/N)
>Every time that I refresh group policy it wants to reboot, I see 1704
>that security policy in the group policy object has been applied
>I've ran gpupdate as the local admin and as a domain admin.
>If I try to run fport on the server as either a local admin or a domain
>admin I get the following error "You must have administrator privileges to
>run fport - exiting...... 
>The local admin account is in the administrators group, and the domain
>group is in the administrators group.
>Could this be a registry tattoo from the xp policy that got applied? any
>Thanks Everyone, take care and have fun --John
>You can unsubscribe from gptalk by sending email to
>gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
>by logging into the freelists.org Web interface. Archives for the list
>are available at http://www.freelists.org/archives/gptalk/

Other related posts: