Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » GPO Problems
GPO Problems [message #161109] Wed, 16 September 2009 07:32 Go to next message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Dear Friends

I have installed Win server 2003 standard edition on my Domain
Controller. I am confused about Group Policy as there are two policies
in the Administrative Tools.

1 - Domain Controller Security Policy
2 - Domain Security Policy

I have 1 Domain Controller, 3 Organizational Unit, and more than 15
UsersÖ

If I want to control Computer Configuration and User Configuration I
need to open it with MMC and GP Object editor, but I am confuse about
which policy should be edited?

I just wanted to write down my company name in Windows Internet
Explorer, I went to administrative templates of User Configuration and
given my company name in IEM. But itís not reflecting on any client pc.
I also tried other settings from Administrative templates, but none of
them is reflecting on client side. I have used both the policy and
edited one by one but none of them is applying any kind of restriction
on client pc.

I have also tired to create new Group Policy but it did not work for
me. I have installed GPMC and tried to do the same thing using GPMC but
again failed. I got stuck now donít know whatís wrong I did, any help
would be appreciated and useful for me.

Thanks in advance.

Smiten
www.cfotechsolutions.com
**


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Re: GPO Problems [message #161111 is a reply to message #161109] Wed, 16 September 2009 09:00 Go to previous messageGo to next message
Danny Sanders  is currently offline Danny Sanders  United States
Messages: 169
Registered: July 2009
Senior Member
Create an OU. Move the computers into the OU that you want to be affected by
the group policy, right click the OU - Properties - group policy.


hth
DDS

"Smiten" <Smiten.3ym0va@DoNotSpam.com> wrote in message
news:Smiten.3ym0va@DoNotSpam.com...
>
> Dear Friends
>
> I have installed Win server 2003 standard edition on my Domain
> Controller. I am confused about Group Policy as there are two policies
> in the Administrative Tools.
>
> 1 - Domain Controller Security Policy
> 2 - Domain Security Policy
>
> I have 1 Domain Controller, 3 Organizational Unit, and more than 15
> Users.
>
> If I want to control Computer Configuration and User Configuration I
> need to open it with MMC and GP Object editor, but I am confuse about
> which policy should be edited?
>
> I just wanted to write down my company name in Windows Internet
> Explorer, I went to administrative templates of User Configuration and
> given my company name in IEM. But it's not reflecting on any client pc.
> I also tried other settings from Administrative templates, but none of
> them is reflecting on client side. I have used both the policy and
> edited one by one but none of them is applying any kind of restriction
> on client pc.
>
> I have also tired to create new Group Policy but it did not work for
> me. I have installed GPMC and tried to do the same thing using GPMC but
> again failed. I got stuck now don't know what's wrong I did, any help
> would be appreciated and useful for me.
>
> Thanks in advance.
>
> Smiten
> www.cfotechsolutions.com
> **
>
>
> --
> Smiten
> ------------------------------------------------------------ ------------
> Smiten's Profile: http://forums.techarena.in/members/135080.htm
> View this thread: http://forums.techarena.in/active-directory/1247268.htm
>
> http://forums.techarena.in
>
Re: GPO Problems [message #161113 is a reply to message #161109] Wed, 16 September 2009 09:06 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Launch GPMC, create a new GPO and link it to the domain (providing that you
want the settings you mention to apply to all domain users/computers).
Otherwise, create a new GPO and link it to an OU that contains target
objects (users or computers)...

hth
Marcin

"Smiten" <Smiten.3ym0va@DoNotSpam.com> wrote in message
news:Smiten.3ym0va@DoNotSpam.com...
>
> Dear Friends
>
> I have installed Win server 2003 standard edition on my Domain
> Controller. I am confused about Group Policy as there are two policies
> in the Administrative Tools.
>
> 1 - Domain Controller Security Policy
> 2 - Domain Security Policy
>
> I have 1 Domain Controller, 3 Organizational Unit, and more than 15
> UsersÖ
>
> If I want to control Computer Configuration and User Configuration I
> need to open it with MMC and GP Object editor, but I am confuse about
> which policy should be edited?
>
> I just wanted to write down my company name in Windows Internet
> Explorer, I went to administrative templates of User Configuration and
> given my company name in IEM. But itís not reflecting on any client pc.
> I also tried other settings from Administrative templates, but none of
> them is reflecting on client side. I have used both the policy and
> edited one by one but none of them is applying any kind of restriction
> on client pc.
>
> I have also tired to create new Group Policy but it did not work for
> me. I have installed GPMC and tried to do the same thing using GPMC but
> again failed. I got stuck now donít know whatís wrong I did, any help
> would be appreciated and useful for me.
>
> Thanks in advance.
>
> Smiten
> www.cfotechsolutions.com
> **
>
>
> --
> Smiten
> ------------------------------------------------------------ ------------
> Smiten's Profile: http://forums.techarena.in/members/135080.htm
> View this thread: http://forums.techarena.in/active-directory/1247268.htm
>
> http://forums.techarena.in
>
Re: GPO Problems [message #161130 is a reply to message #161109] Wed, 16 September 2009 23:33 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Smiten,

Keep this both as they are, as defaults. Do not change them, so in case of
problems you can go back to state where most settings are functioning in
case some problems occur with new configured GPOs.

To use GPOs you should reflect your company structure in it's own OU with
subOUs for user accounts and computer accounts. This way you can create GPOs
for your needs.

Only the password policy an account lockout policy have to bet set on domain
level, so you can create a new GPO on domain level for your neeeds.

Password/account GPO on linked OU will NOT work, when machines are connected
to the domain.

For different password/account policies you have to use 2008 or higher with
functional levels set to windows serevr 2008. Or you maybe have to find some
3rd party tools.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear Friends
>
> I have installed Win server 2003 standard edition on my Domain
> Controller. I am confused about Group Policy as there are two policies
> in the Administrative Tools.
>
> 1 - Domain Controller Security Policy
> 2 - Domain Security Policy
> I have 1 Domain Controller, 3 Organizational Unit, and more than 15
> Users
>
> If I want to control Computer Configuration and User Configuration I
> need to open it with MMC and GP Object editor, but I am confuse about
> which policy should be edited?
>
> I just wanted to write down my company name in Windows Internet
> Explorer, I went to administrative templates of User Configuration and
> given my company name in IEM. But it’s not reflecting on any client
> pc. I also tried other settings from Administrative templates, but
> none of them is reflecting on client side. I have used both the policy
> and edited one by one but none of them is applying any kind of
> restriction on client pc.
>
> I have also tired to create new Group Policy but it did not work for
> me. I have installed GPMC and tried to do the same thing using GPMC
> but again failed. I got stuck now don’t know what’s wrong I did, any
> help would be appreciated and useful for me.
>
> Thanks in advance.
>
> Smiten
> www.cfotechsolutions.com
> **
> http://forums.techarena.in
>
Re: GPO Problems [message #161134 is a reply to message #161113] Thu, 17 September 2009 00:15 Go to previous messageGo to next message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Thank you Marcin, i have tried this but did not work for me, it is not
reflecting any kind of restriction, i created new Policy and linked it
to existing one and then edit it, but did not work.. Are any user groups
Should be a member of Administrators? or no?



Marcin;4616315 Wrote:
> Launch GPMC, create a new GPO and link it to the domain (providing that
> you
> want the settings you mention to apply to all domain users/computers).
> Otherwise, create a new GPO and link it to an OU that contains target
> objects (users or computers)...
>
> hth
> Marcin
>
> "Smiten" <Smiten.3ym0va@DoNotSpam.com> wrote in message
> news:Smiten.3ym0va@DoNotSpam.com...
> >
> > Dear Friends
> >
> > I have installed Win server 2003 standard edition on my Domain
> > Controller. I am confused about Group Policy as there are two
> policies
> > in the Administrative Tools.
> >
> > 1 - Domain Controller Security Policy
> > 2 - Domain Security Policy
> >
> > I have 1 Domain Controller, 3 Organizational Unit, and more than 15
> > UsersÖ
> >
> > If I want to control Computer Configuration and User Configuration I
> > need to open it with MMC and GP Object editor, but I am confuse
> about
> > which policy should be edited?
> >
> > I just wanted to write down my company name in Windows Internet
> > Explorer, I went to administrative templates of User Configuration
> and
> > given my company name in IEM. But itís not reflecting on any client
> pc.
> > I also tried other settings from Administrative templates, but none
> of
> > them is reflecting on client side. I have used both the policy and
> > edited one by one but none of them is applying any kind of
> restriction
> > on client pc.
> >
> > I have also tired to create new Group Policy but it did not work for
> > me. I have installed GPMC and tried to do the same thing using GPMC
> but
> > again failed. I got stuck now donít know whatís wrong I did, any
> help
> > would be appreciated and useful for me.
> >
> > Thanks in advance.
> >
> > Smiten
> > www.cfotechsolutions.com
> > **
> >
> >
> > --
> > Smiten
> >
> ------------------------------------------------------------ ------------
> > Smiten's Profile: http://forums.techarena.in/members/135080.htm
> > View this thread:
> http://forums.techarena.in/active-directory/1247268.htm
> >
> > http://forums.techarena.in
> >


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Re: GPO Problems [message #161135 is a reply to message #161134] Thu, 17 September 2009 00:23 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Smiten,

If you link a GPO to an OU the OU MUST include the user accounts or computer
accounts depending on the policy settings. So is this the case?

If yes for above run on the client rsop.msc or gpresult /v and check the
output.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thank you Marcin, i have tried this but did not work for me, it is not
> reflecting any kind of restriction, i created new Policy and linked it
> to existing one and then edit it, but did not work.. Are any user
> groups Should be a member of Administrators? or no?
>
> Marcin;4616315 Wrote:
>
>> Launch GPMC, create a new GPO and link it to the domain (providing
>> that
>> you
>> want the settings you mention to apply to all domain
>> users/computers).
>> Otherwise, create a new GPO and link it to an OU that contains target
>> objects (users or computers)...
>> hth
>> Marcin
>> "Smiten" <Smiten.3ym0va@DoNotSpam.com> wrote in message
>> news:Smiten.3ym0va@DoNotSpam.com...
>>
>>> Dear Friends
>>>
>>> I have installed Win server 2003 standard edition on my Domain
>>> Controller. I am confused about Group Policy as there are two
>>>
>> policies
>>
>>> in the Administrative Tools.
>>>
>>> 1 - Domain Controller Security Policy
>>> 2 - Domain Security Policy
>>> I have 1 Domain Controller, 3 Organizational Unit, and more than 15
>>> Users
>>>
>>> If I want to control Computer Configuration and User Configuration I
>>> need to open it with MMC and GP Object editor, but I am confuse
>>>
>> about
>>
>>> which policy should be edited?
>>>
>>> I just wanted to write down my company name in Windows Internet
>>> Explorer, I went to administrative templates of User Configuration
>>>
>> and
>>
>>> given my company name in IEM. But it’s not reflecting on any client
>>>
>> pc.
>>
>>> I also tried other settings from Administrative templates, but none
>>>
>> of
>>
>>> them is reflecting on client side. I have used both the policy and
>>> edited one by one but none of them is applying any kind of
>>>
>> restriction
>>
>>> on client pc.
>>>
>>> I have also tired to create new Group Policy but it did not work for
>>> me. I have installed GPMC and tried to do the same thing using GPMC
>>>
>> but
>>
>>> again failed. I got stuck now don’t know what’s wrong I did, any
>>>
>> help
>>
>>> would be appreciated and useful for me.
>>>
>>> Thanks in advance.
>>>
>>> Smiten
>>> www.cfotechsolutions.com
>>> **
>>> --
>>> Smiten
>> ------------------------------------------------------------ ---------
>> ---
>>
>>> Smiten's Profile: http://forums.techarena.in/members/135080.htm View
>>> this thread:
>>>
>> http://forums.techarena.in/active-directory/1247268.htm
>>
>>> http://forums.techarena.in
>>>
> http://forums.techarena.in
>
Re: GPO Problems [message #161136 is a reply to message #161109] Thu, 17 September 2009 00:33 Go to previous messageGo to next message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Thanks DDS,
I have followed this but, unfortunately did not work. I have moved
computers into appropriate OU and tried to edit that Policy, but it was
not reflecting any thing. any way, thanks for your kind help.

Smiten


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Re: GPO Problems [message #161137 is a reply to message #161136] Thu, 17 September 2009 01:56 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Smiten wrote:
> Thanks DDS,
> I have followed this but, unfortunately did not work. I have moved
> computers into appropriate OU and tried to edit that Policy, but it was
> not reflecting any thing. any way, thanks for your kind help.

What kind of settings did you enable on the OU you moved the clients in?
Are those "Computer Configuration" settings? Only "Computer
ConfiguratioN" settings will work for computers - "User Configuration"
settings work for users. If that isn't the issue, can you check on one
of the clients whether the policy is applied? You can do that by running
rsop.msc and gpresult /z.

Cheers,
Florian
Re: GPO Problems [message #161138 is a reply to message #161130] Thu, 17 September 2009 01:26 Go to previous messageGo to next message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Dear Friend,

I have created by that way only, One OU named of my Company, and
Sub OUs of department. and under those Sub OUs, i have created Users
and Groups... i had all the computers into default Computers folder than
i moved into individual Sub OUs where the user belongs to.

Then after i created New policies for each Sub OUs and linked it with
existing one. I edited newly created Policy and enabled some
restrictions from Administrative Task from User Configuration, but
whenever i log on with any of the user name on client pc. it did not
reflect anything.

Ex. If i enabled Remove Run from Start menu from Administrative
Templates of User Configuration, It should reflect on client pc whenever
any users log on. but i tested all user on diff client pc, none of them
had run disabled.

I have tried to enforced all GPO one by one to check whether it works
or not. even i tried other trouble shooting, but none worked for me.

I never had this kind of problem, infect i used to do this in my home
company since more than 4 months. and i formatted server more than 3
time and created Domain.. but never had such problem... whatever
restriction i applied was reflecting.. but this time i m just screwed
up..

any way, thank for your help Meinolf Weber

Smiten
www.cfotechsolutions.com



'Meinolf Weber [MVP-DS Wrote:
> ;4616901']Hello Smiten,
>
> Keep this both as they are, as defaults. Do not change them, so in case
> of
> problems you can go back to state where most settings are functioning
> in
> case some problems occur with new configured GPOs.
>
> To use GPOs you should reflect your company structure in it's own OU
> with
> subOUs for user accounts and computer accounts. This way you can create
> GPOs
> for your needs.
>
> Only the password policy an account lockout policy have to bet set on
> domain
> level, so you can create a new GPO on domain level for your neeeds.
>
> Password/account GPO on linked OU will NOT work, when machines are
> connected
> to the domain.
>
> For different password/account policies you have to use 2008 or higher
> with
> functional levels set to windows serevr 2008. Or you maybe have to find
> some
> 3rd party tools.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Dear Friends
> >
> > I have installed Win server 2003 standard edition on my Domain
> > Controller. I am confused about Group Policy as there are two
> policies
> > in the Administrative Tools.
> >
> > 1 - Domain Controller Security Policy
> > 2 - Domain Security Policy
> > I have 1 Domain Controller, 3 Organizational Unit, and more than 15
> > Users
> >
> > If I want to control Computer Configuration and User Configuration I
> > need to open it with MMC and GP Object editor, but I am confuse
> about
> > which policy should be edited?
> >
> > I just wanted to write down my company name in Windows Internet
> > Explorer, I went to administrative templates of User Configuration
> and
> > given my company name in IEM. But itís not reflecting on any client
> > pc. I also tried other settings from Administrative templates, but
> > none of them is reflecting on client side. I have used both the
> policy
> > and edited one by one but none of them is applying any kind of
> > restriction on client pc.
> >
> > I have also tired to create new Group Policy but it did not work for
> > me. I have installed GPMC and tried to do the same thing using GPMC
> > but again failed. I got stuck now donít know whatís wrong I did, any
> > help would be appreciated and useful for me.
> >
> > Thanks in advance.
> >
> > Smiten
> > www.cfotechsolutions.com
> > **
> > http://forums.techarena.in
> >


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Re: GPO Problems [message #161139 is a reply to message #161138] Thu, 17 September 2009 02:36 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Smiten,

You have to make sure that computers and comupters are in the OU where the
GPO is linked to. The computer configuration part belongs to computers and
the user configuration part to the user, so depending on the settings you
must have the accounts located there.

If rsop.msc or gpresult /v logged on with a user account doesn't give any
output there can be additional problems with GPO applying belomging to DNS
confgiruration or slow links between sites.

So please run on a machine which is in the OU where you linked a GPO with
a user account that also belongs to it "gpresult /v >c:\gpresult.log" in
a command prompt and post the output here.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Dear Friend,
>
> I have created by that way only, One OU named of my Company, and
> Sub OUs of department. and under those Sub OUs, i have created Users
> and Groups... i had all the computers into default Computers folder
> than
> i moved into individual Sub OUs where the user belongs to.
> Then after i created New policies for each Sub OUs and linked it with
> existing one. I edited newly created Policy and enabled some
> restrictions from Administrative Task from User Configuration, but
> whenever i log on with any of the user name on client pc. it did not
> reflect anything.
>
> Ex. If i enabled Remove Run from Start menu from Administrative
> Templates of User Configuration, It should reflect on client pc
> whenever any users log on. but i tested all user on diff client pc,
> none of them had run disabled.
>
> I have tried to enforced all GPO one by one to check whether it works
> or not. even i tried other trouble shooting, but none worked for me.
>
> I never had this kind of problem, infect i used to do this in my home
> company since more than 4 months. and i formatted server more than 3
> time and created Domain.. but never had such problem... whatever
> restriction i applied was reflecting.. but this time i m just screwed
> up..
>
> any way, thank for your help Meinolf Weber
>
> Smiten
> www.cfotechsolutions.com
> 'Meinolf Weber [MVP-DS Wrote:
>
>> ;4616901']Hello Smiten,
>>
>> Keep this both as they are, as defaults. Do not change them, so in
>> case
>> of
>> problems you can go back to state where most settings are functioning
>> in
>> case some problems occur with new configured GPOs.
>> To use GPOs you should reflect your company structure in it's own OU
>> with
>> subOUs for user accounts and computer accounts. This way you can
>> create
>> GPOs
>> for your needs.
>> Only the password policy an account lockout policy have to bet set on
>> domain
>> level, so you can create a new GPO on domain level for your neeeds.
>> Password/account GPO on linked OU will NOT work, when machines are
>> connected
>> to the domain.
>> For different password/account policies you have to use 2008 or
>> higher
>> with
>> functional levels set to windows serevr 2008. Or you maybe have to
>> find
>> some
>> 3rd party tools.
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Dear Friends
>>>
>>> I have installed Win server 2003 standard edition on my Domain
>>> Controller. I am confused about Group Policy as there are two
>>>
>> policies
>>
>>> in the Administrative Tools.
>>>
>>> 1 - Domain Controller Security Policy
>>> 2 - Domain Security Policy
>>> I have 1 Domain Controller, 3 Organizational Unit, and more than 15
>>> Users
>>> If I want to control Computer Configuration and User Configuration I
>>> need to open it with MMC and GP Object editor, but I am confuse
>>>
>> about
>>
>>> which policy should be edited?
>>>
>>> I just wanted to write down my company name in Windows Internet
>>> Explorer, I went to administrative templates of User Configuration
>>>
>> and
>>
>>> given my company name in IEM. But it’s not reflecting on any client
>>> pc. I also tried other settings from Administrative templates, but
>>> none of them is reflecting on client side. I have used both the
>>>
>> policy
>>
>>> and edited one by one but none of them is applying any kind of
>>> restriction on client pc.
>>>
>>> I have also tired to create new Group Policy but it did not work for
>>> me. I have installed GPMC and tried to do the same thing using GPMC
>>> but again failed. I got stuck now don’t know what’s wrong I did, any
>>> help would be appreciated and useful for me.
>>>
>>> Thanks in advance.
>>>
>>> Smiten
>>> www.cfotechsolutions.com
>>> **
>>> http://forums.techarena.in
> http://forums.techarena.in
>
Re: GPO Problems [message #161140 is a reply to message #161137] Thu, 17 September 2009 02:39 Go to previous messageGo to next message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Hi Florian

I have both the setting enabled, Computer and User, but i m working on
User Configuration only, and enabled only one item which is remove run
form start menu from Administrative Templates, but it's not reflecting
on any users log on at client side. I have tired to move Computers into
OU with User account, but nothing happened, so moved back to default
Computers folder. I tried to check the RSop.msc but none worked as it
says RSoP data is invalid. Likely causes are, data is corrupt, data has
been deleted or data has never been created.
it also says that "invalid namespace"

I don't know what does it mean, would you please explain?

Thanks

'Florian Frommherz [MVP Wrote:
> ;4616999']Howdie!
>
> Smiten wrote:
> > Thanks DDS,
> > I have followed this but, unfortunately did not work. I have moved
> > computers into appropriate OU and tried to edit that Policy, but it
> was
> > not reflecting any thing. any way, thanks for your kind help.
>
> What kind of settings did you enable on the OU you moved the clients
> in?
> Are those "Computer Configuration" settings? Only "Computer
> ConfiguratioN" settings will work for computers - "User Configuration"
> settings work for users. If that isn't the issue, can you check on one
> of the clients whether the policy is applied? You can do that by
> running
> rsop.msc and gpresult /z.
>
> Cheers,
> Florian


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Re: GPO Problems [message #161142 is a reply to message #161140] Thu, 17 September 2009 03:32 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Smiten wrote:
> I have both the setting enabled, Computer and User, but i m working on
> User Configuration only, and enabled only one item which is remove run
> form start menu from Administrative Templates, but it's not reflecting
> on any users log on at client side. I have tired to move Computers into
> OU with User account, but nothing happened, so moved back to default
> Computers folder. I tried to check the RSop.msc but none worked as it
> says RSoP data is invalid. Likely causes are, data is corrupt, data has
> been deleted or data has never been created.
> it also says that "invalid namespace"

As you already have found out, Group Policies are displayed in two nodes
in Group Policy Editor: "User Configuration" and "Computer
Configuration". Each node has user or computer specific configuration
setting that only apply to the AD objects in question.

Say, if you had a GPO that has both settings from the "User
ConfiguratioN" and the "Computer Configuration" node configured and
linked it to an OU with both AD computer objects and user objects, you'd
see the following:
- a user in that OU logs on to an computer that is also in that OU: all
settings should be applied
- a user in that OU logs on to an computer that is NOT in that OU: only
"USer Configuration" settings are applied.
- a user that is NOT in that OU logs on to a computer in that OU: only
"Computer Configuration" settings are applied.

This resuls in the fact that objects only apply settings that are
configured in "their" Group Policy Editor node:
- user objects only apply "User Configuration" settings that are
configured in GPOs that are linked in their OUs.
- computer objects only apply "Computer Configuration" settings that are
configured in GPOs that are linked to their OUs.

Cheers,
Florian
Re: GPO Problems [message #161145 is a reply to message #161109] Thu, 17 September 2009 06:47 Go to previous message
Smiten  is currently offline Smiten  United States
Messages: 9
Registered: September 2009
Junior Member
Dear Florian and Meinolf Weber, Thank you very much for your help, but i
am running out of troubleshooting time so finally decided to format and
install Win Server 2007 instead of 2003 in New hard disk and run my
domain controller from that HDD, Will continue solving the current
problem but for a time being i just have to stop troubleshooting, I was
just wondering whether Win 2007 will work fine without any compatible
problems..

Once again thank you so much for helping. I will let you guys know
whatever solutions arrive.

Cheers
Smiten


--
Smiten
------------------------------------------------------------ ------------
Smiten's Profile: http://forums.techarena.in/members/135080.htm
View this thread: http://forums.techarena.in/active-directory/1247268.htm

http://forums.techarena.in
Previous Topic:Employee ID field
Next Topic:Security Certificate template not in the list
Goto Forum:
  


Current Time: Fri Jan 19 00:36:33 MST 2018

Total time taken to generate the page: 0.05931 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software