Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Need Help in GroupPolicy Settings
Need Help in GroupPolicy Settings [message #299197] Mon, 26 October 2009 18:31 Go to next message
irsh19  is currently offline irsh19  United States
Messages: 17
Registered: September 2009
Junior Member
Hi All,

I am trying to apply group policy settings on XP Pro clients which are
in my Domain, I have successfully applied the Start Menu redirection on
all the client PC in my Domain,and also i have disabled all the settings
which are listed in Start Menu and personilized the Start Menu according
to our requirement but still I am able to get Start --> Programs
-->Accessiblites and Startup and other shortcuts in the Programs Folder
which I have already disabled from GroupPolicy: User Configuration -->
Administrative Templates -->Start Menu and TaskBar --> "Remove All
Programs list from the Start Menu" is Enable but still after a user
logging in to the client PC he is getting the correct Group Policy
Settings except he can see the Start Menu-->Programs--> Accessibilites
and all other contents which are present...However I also searched
online and got one suggestion that to hide the Programs folder by the
following:

attrib +H "C:\Documents and Settings\%USERNAME%\Start
Menu\Programs\Accessories"

now what I have done that I have created a batch file for this command
and applied on Group Policy --> User Configuration -->Windows Settings
--> Scripts --> Logon and added the batch but still I am not able to get
the result...

Can anyone help me on this and let me know where I am going wrong!!!

Thanks and Regards
Irsh :)


--
irsh19
------------------------------------------------------------ ------------
irsh19's Profile: http://forums.techarena.in/members/123384.htm
View this thread: http://forums.techarena.in/active-directory/1263574.htm

http://forums.techarena.in
Re: Need Help in GroupPolicy Settings [message #299625 is a reply to message #299197] Tue, 27 October 2009 06:46 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello irsh19,

I think you have to use /D also for all folders:

attrib +H "C:\Documents and Settings\%USERNAME%\Start Menu\Programs\Accessories"
/D

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi All,
>
> I am trying to apply group policy settings on XP Pro clients which are
> in my Domain, I have successfully applied the Start Menu redirection
> on all the client PC in my Domain,and also i have disabled all the
> settings which are listed in Start Menu and personilized the Start
> Menu according to our requirement but still I am able to get Start -->
> Programs -->Accessiblites and Startup and other shortcuts in the
> Programs Folder which I have already disabled from GroupPolicy: User
> Configuration --> Administrative Templates -->Start Menu and TaskBar
> --> "Remove All Programs list from the Start Menu" is Enable but still
> after a user logging in to the client PC he is getting the correct
> Group Policy Settings except he can see the Start Menu-->Programs-->
> Accessibilites and all other contents which are present...However I
> also searched online and got one suggestion that to hide the Programs
> folder by the following:
>
> attrib +H "C:\Documents and Settings\%USERNAME%\Start
> Menu\Programs\Accessories"
>
> now what I have done that I have created a batch file for this command
> and applied on Group Policy --> User Configuration -->Windows Settings
> --> Scripts --> Logon and added the batch but still I am not able to
> get the result...
>
> Can anyone help me on this and let me know where I am going wrong!!!
>
> Thanks and Regards
> Irsh :)
> http://forums.techarena.in
>
Re: Active Directory Replicatioin over Nat'd IP [message #301263 is a reply to message #299625] Wed, 28 October 2009 14:08 Go to previous messageGo to next message
irsh19  is currently offline irsh19  United States
Messages: 17
Registered: September 2009
Junior Member
Thanks alot... I supplied the same switch and its working now for me..


Thanks, however you have posted reply to my different query, I also
need some help in understanding "Active Directory Replicatioin over
Nat'd IP"


--
irsh19
------------------------------------------------------------ ------------
irsh19's Profile: http://forums.techarena.in/members/123384.htm
View this thread: http://forums.techarena.in/active-directory/1263575.htm

http://forums.techarena.in
Re: Active Directory Replicatioin over Nat'd IP [message #301652 is a reply to message #301263] Wed, 28 October 2009 23:23 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"irsh19" <irsh19.40s9ja@DoNotSpam.com> wrote in message
news:irsh19.40s9ja@DoNotSpam.com...
>
> Thanks alot... I supplied the same switch and its working now for me..
>
>
> Thanks, however you have posted reply to my different query, I also
> need some help in understanding "Active Directory Replicatioin over
> Nat'd IP"
>
>
> --
> irsh19
> ------------------------------------------------------------ ------------


Irsh19,

Did you post a new thread for the NAT question? I would suggest to do that.

I can tell you one thing, that AD communications fail across a NAT. NAT
cannot translate the secured, encrypted AD traffic. The only way to get
around that is using a VPN through the NAT.

Ace
Re: Active Directory Replicatioin over Nat'd IP [message #301678 is a reply to message #301263] Thu, 29 October 2009 00:39 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello irsh19,

As Ace already stated AD needs 'normal' traffic, additional we need more
information about your problem and the setup of the domain. OS version and
SP/patch level, also the amount of DCs and how they are located. How is DNS
setup in the domain?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks alot... I supplied the same switch and its working now for me..
>
> Thanks, however you have posted reply to my different query, I also
> need some help in understanding "Active Directory Replicatioin over
> Nat'd IP"
>
> http://forums.techarena.in
>
Re: Active Directory Replicatioin over Nat'd IP [message #302961 is a reply to message #301678] Fri, 30 October 2009 04:05 Go to previous messageGo to next message
irsh19  is currently offline irsh19  United States
Messages: 17
Registered: September 2009
Junior Member
We have relatively many sites on the landscape,the headoffice is having
the Primary Domain controller with integrated DNS,the other site in
branch offices are connected through MPLS and there are also Juniper
firewall,all the other sites are working fine,out of 12 sites only 1
site is giving porblem in replication. All the branch offices have
Additional domain controllers with ActiveDirectory integrated DNS.The
sites are communicating through NAT'd IPs.I am facing problems in
Replication.


--
irsh19
------------------------------------------------------------ ------------
irsh19's Profile: http://forums.techarena.in/members/123384.htm
View this thread: http://forums.techarena.in/active-directory/1263575.htm

http://forums.techarena.in
Re: Active Directory Replicatioin over Nat'd IP [message #302962 is a reply to message #302961] Fri, 30 October 2009 04:26 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello irsh19,

Please run repadmin /showrepl andpost the complete outpout from the problem
DC and one of it's replication partner.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have relatively many sites on the landscape,the headoffice is
> having the Primary Domain controller with integrated DNS,the other
> site in branch offices are connected through MPLS and there are also
> Juniper firewall,all the other sites are working fine,out of 12 sites
> only 1 site is giving porblem in replication. All the branch offices
> have Additional domain controllers with ActiveDirectory integrated
> DNS.The sites are communicating through NAT'd IPs.I am facing problems
> in Replication.
>
> http://forums.techarena.in
>
Re: Active Directory Replicatioin over Nat'd IP [message #303098 is a reply to message #302961] Fri, 30 October 2009 07:41 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"irsh19" <irsh19.40v73c@DoNotSpam.com> wrote in message
news:irsh19.40v73c@DoNotSpam.com...
>
> We have relatively many sites on the landscape,the headoffice is having
> the Primary Domain controller with integrated DNS,the other site in
> branch offices are connected through MPLS and there are also Juniper
> firewall,all the other sites are working fine,out of 12 sites only 1
> site is giving porblem in replication. All the branch offices have
> Additional domain controllers with ActiveDirectory integrated DNS.The
> sites are communicating through NAT'd IPs.I am facing problems in
> Replication.
>
>
> --
> irsh19
> ------------------------------------------------------------ ------------


In addition to Meinolf's requests, try Portquery from Microsoft, to check
communications to see if any ports are blocked.

Also, you said they are communicating through NAT'd IPs. I assume that all
of the sites are either routed by the private IP ranges, or there are VPNs.
If one site truly is connected to the outer interface of a NAT device, they
will not be able to communicate, since AD communication fails across a NAT.
So my interpretation of your statement is that it's more than likely an
internal, routed infrastructure across an MPLS.

I would also suggest (if you haven't already done so), to post any Event log
errors (please post the EventID# and Source Names), as well as run:

dcdiag /v
netdiag /v

And post any errors or fails you see in the results.

Ace

Ace
Previous Topic:Top Forest controller for existing multiple Forest.
Next Topic:GPO modifications on local computer
Goto Forum:
  


Current Time: Wed Jan 17 04:14:14 MST 2018

Total time taken to generate the page: 0.04298 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software