Tilted Forum Project Discussion Community - View Single Post

rubicon · 02-26-2005, 06:58 PM

A few things to look at...

GPO settings are defined as Computer or User centric. GPOs with mixed policies (Computer and User) will only apply to the like objects in the OU. Thus, Computer policies won't apply to John Smith in the Marketing OU. You must apply a mixed GPO against the OU(s) which are home to the User and Computer object(s).

You may also want to look at the ACL on your new GPO. Some times Windows may lose an ACL you need for the policies to apply. Not sure why but I've seen it happen.

Windows Server 2003 has some good tools to do all of this: AD Users & Computers is a start then the Group Policy Admin tool (via MMC) gives you the skinny on settings, ACLs, etc. Don't forget to use the GPRESULT app on the client computer to view which policies are being applied and which are not.

02-26-2005, 06:58 PM	#2 (permalink)
rubicon Stop. Think. Question. Location: Redondo Beach, CA	A few things to look at... GPO settings are defined as Computer or User centric. GPOs with mixed policies (Computer and User) will only apply to the like objects in the OU. Thus, Computer policies won't apply to John Smith in the Marketing OU. You must apply a mixed GPO against the OU(s) which are home to the User and Computer object(s). You may also want to look at the ACL on your new GPO. Some times Windows may lose an ACL you need for the policies to apply. Not sure why but I've seen it happen. Windows Server 2003 has some good tools to do all of this: AD Users & Computers is a start then the Group Policy Admin tool (via MMC) gives you the skinny on settings, ACLs, etc. Don't forget to use the GPRESULT app on the client computer to view which policies are being applied and which are not. __________________ How you do anything is how you do everything. Last edited by rubicon; 02-26-2005 at 07:02 PM..