| Author | Messages | |
jacquesl
Posts:26
 | | 03/10/2010 7:55 AM |
| * Hi
We have 63 win 2003 R2 dc in our networking and about 4800 computers.
The problem I have is that some of the user gpo's are not applying on XP
sp2 computers.
This is what I have done so far
1 created a new internet gpo
2 Logon to the xp pc and the gpo does not apply I run a gpo result and
force and the gpo shows as applied.
3 check the event log no errors
4 go to a other xp pc and logon to the pc with the same user name and
the gpo applies
5 log on to a 3rd xp pc with the same username and then it does not
apply
6 this is not the only user I have with this problem
7 all of the xp pc's that i test tested logs on to the same dc
8 recreated user profile same problem
9 this is very random
the only thing that happened in the last 3 months is that we had a ADRAP
done by Microsoft and we had to make some changes to the domain
also all of the computer gpo's applies on the computers even if i add a
new one it is only user gpo's
also logon time has go up
also i have 227 sites in ad and not all of them has dc
i have about 7 to 10 user gpo's per user
thanks who can help Please
here is a gp result on a user that does not work the GPO is there.
C:\Documents and Settings\Eugene.Tome>gpresult
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 3/9/2010 at 5:23:15 PM
RSOP results for \Eugene.Tome on MGHQCZC93712F1 : Logging Mode
---------------------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name:
Domain Type: Windows 2000
Site Name: ZA-Core-Isando-MHQ
Roaming Profile:
Local Profile: C:\Documents and Settings\Eugene.Tome
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=MGHQCZC93712F1,
Last time Group Policy was applied: 3/9/2010 at 4:26:35 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
PC Restarts
Default Domain Policy
Disable FireWall
Turn OFF System Restore
Turn on Automatic Update Services
WSUS Isando MHQ
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Office 2007 Policy
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Office 2003 Policy
Filtering: Not Applied (Empty)
ADSelfHelp
Filtering: Disabled (Link)
Local Group Policy
Filtering: Not Applied (Empty)
OU_User_Move
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MGHQCZC93712F1$
Domain Computers
USER SETTINGS
--------------
CN=Eugene Tome,
Last time Group Policy was applied: 3/9/2010 at 4:57:19 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
Office 2003 Policy
Office 2007 Policy
Dameware Remote
Avis Proxy 2
Avis Proxy
BGInfo Logon Script
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
WSUS Isando MHQ
Filtering: Not Applied (Empty)
Turn OFF System Restore
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Set Time for Domain to PDC
Filtering: Not Applied (Empty)
Disable FireWall
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
Turn on Automatic Update Services
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Automotive Full Internet Access
VPN Users
Internet Users
BMR VPN Users
RAC Jutastat Users
AVIS Rent a Car
RAC Jutastat Users
C:\Documents and Settings\Eugene.Tome>
#####################################################################################
Note:
This message is for the named person's use only. It may contain confidential,
proprietary or legally privileged information. No confidentiality or privilege
is waived or lost by any mistransmission. If you receive this message in error,
please immediately delete it and all copies of it from your system, destroy any
hard copies of it and notify the sender. You must not, directly or indirectly,
use, disclose, distribute, print, or copy any part of this message if you are not
the intended recipient. Avis and any of its subsidiaries each reserve
the right to monitor all e-mail communications through its networks.
Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorized to state them to be the
views of any such entity.
Thank You.
#####################################################################################
| | | |
| jacquesl
Posts:26
| | 03/10/2010 10:46 AM |
| Hi All
Please help
Urgent problem
From: Jacques Liebenberg
Sent: Wednesday, March 10, 2010 9:52 AM
To: 'activedir@mail.activedir.org'
Subject: GPO Not working
* Hi
We have 63 win 2003 R2 dc in our networking and about 4800 computers.
The problem I have is that some of the user gpo's are not applying on XP
sp2 computers.
This is what I have done so far
1 created a new internet gpo
2 Logon to the xp pc and the gpo does not apply I run a gpo result and
force and the gpo shows as applied.
3 check the event log no errors
4 go to a other xp pc and logon to the pc with the same user name and
the gpo applies
5 log on to a 3rd xp pc with the same username and then it does not
apply
6 this is not the only user I have with this problem
7 all of the xp pc's that i test tested logs on to the same dc
8 recreated user profile same problem
9 this is very random
the only thing that happened in the last 3 months is that we had a ADRAP
done by Microsoft and we had to make some changes to the domain
also all of the computer gpo's applies on the computers even if i add a
new one it is only user gpo's
also logon time has go up
also i have 227 sites in ad and not all of them has dc
i have about 7 to 10 user gpo's per user
thanks who can help Please
here is a gp result on a user that does not work the GPO is there.
C:\Documents and Settings\Eugene.Tome>gpresult
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 3/9/2010 at 5:23:15 PM
RSOP results for \Eugene.Tome on MGHQCZC93712F1 : Logging Mode
---------------------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name:
Domain Type: Windows 2000
Site Name: ZA-Core-Isando-MHQ
Roaming Profile:
Local Profile: C:\Documents and Settings\Eugene.Tome
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=MGHQCZC93712F1,
Last time Group Policy was applied: 3/9/2010 at 4:26:35 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
PC Restarts
Default Domain Policy
Disable FireWall
Turn OFF System Restore
Turn on Automatic Update Services
WSUS Isando MHQ
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Office 2007 Policy
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Office 2003 Policy
Filtering: Not Applied (Empty)
ADSelfHelp
Filtering: Disabled (Link)
Local Group Policy
Filtering: Not Applied (Empty)
OU_User_Move
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MGHQCZC93712F1$
Domain Computers
USER SETTINGS
--------------
CN=Eugene Tome,
Last time Group Policy was applied: 3/9/2010 at 4:57:19 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
Office 2003 Policy
Office 2007 Policy
Dameware Remote
Avis Proxy 2
Avis Proxy
BGInfo Logon Script
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
WSUS Isando MHQ
Filtering: Not Applied (Empty)
Turn OFF System Restore
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Set Time for Domain to PDC
Filtering: Not Applied (Empty)
Disable FireWall
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
Turn on Automatic Update Services
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Automotive Full Internet Access
VPN Users
Internet Users
BMR VPN Users
RAC Jutastat Users
AVIS Rent a Car
RAC Jutastat Users
C:\Documents and Settings\Eugene.Tome>
#####################################################################################
Note:
This message is for the named person's use only. It may contain confidential,
proprietary or legally privileged information. No confidentiality or privilege
is waived or lost by any mistransmission. If you receive this message in error,
please immediately delete it and all copies of it from your system, destroy any
hard copies of it and notify the sender. You must not, directly or indirectly,
use, disclose, distribute, print, or copy any part of this message if you are not
the intended recipient. Avis and any of its subsidiaries each reserve
the right to monitor all e-mail communications through its networks.
Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorized to state them to be the
views of any such entity.
Thank You.
#####################################################################################
| | | |
| cmosteller
Posts:21
| | 03/10/2010 1:53 PM |
| What is the exact name of your new policy that you created?
Also, are the user accounts AND computer accounts in the same OU, as you are
applying a "user setting" GPO to what appears to be an OU with computers in
it. With that said, have you tried enabling "loopback policy processing"
with the merge setting?
Thanks.
Chris
On Wed, Mar 10, 2010 at 5:45 AM, Jacques Liebenberg <
Jacques.Liebenberg@avis.co.za> wrote:
> Hi All
>
>
>
> Please help
>
>
>
> Urgent problem
>
>
>
> *From:* Jacques Liebenberg
> *Sent:* Wednesday, March 10, 2010 9:52 AM
>
> *To:* 'activedir@mail.activedir.org'
> *Subject:* GPO Not working
>
>
>
> · Hi
> We have 63 win 2003 R2 dc in our networking and about 4800 computers.
>
> The problem I have is that some of the user gpo's are not applying on XP
> sp2 computers.
>
> This is what I have done so far
>
> 1 created a new internet gpo
> 2 Logon to the xp pc and the gpo does not apply I run a gpo result and
> force and the gpo shows as applied.
> 3 check the event log no errors
> 4 go to a other xp pc and logon to the pc with the same user name and the
> gpo applies
> 5 log on to a 3rd xp pc with the same username and then it does not apply
> 6 this is not the only user I have with this problem
> 7 all of the xp pc's that i test tested logs on to the same dc
> 8 recreated user profile same problem
> 9 this is very random
>
>
> the only thing that happened in the last 3 months is that we had a ADRAP
> done by Microsoft and we had to make some changes to the domain
>
>
> also all of the computer gpo's applies on the computers even if i add a new
> one it is only user gpo's
>
> also logon time has go up
>
> also i have 227 sites in ad and not all of them has dc
> i have about 7 to 10 user gpo's per user
>
> thanks who can help Please
>
> here is a gp result on a user that does not work the GPO is there.
>
> C:\Documents and Settings\Eugene.Tome>gpresult
>
>
>
> Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
>
> Copyright (C) Microsoft Corp. 1981-2001
>
>
>
> Created On 3/9/2010 at 5:23:15 PM
>
>
>
>
>
> RSOP results for \Eugene.Tome on MGHQCZC93712F1 : Logging Mode
>
> ---------------------------------------------------------------------
>
>
>
> OS Type: Microsoft Windows XP Professional
>
> OS Configuration: Member Workstation
>
> OS Version: 5.1.2600
>
> Domain Name:
>
> Domain Type: Windows 2000
>
> Site Name: ZA-Core-Isando-MHQ
>
> Roaming Profile:
>
> Local Profile: C:\Documents and Settings\Eugene.Tome
>
> Connected over a slow link?: No
>
>
>
>
>
> COMPUTER SETTINGS
>
> ------------------
>
> CN=MGHQCZC93712F1,
> Last time Group Policy was applied: 3/9/2010 at 4:26:35 PM
>
> Group Policy was applied from:
> Group Policy slow link threshold: 0 kbps
>
>
>
> Applied Group Policy Objects
>
> -----------------------------
>
> PC Restarts
>
> Default Domain Policy
>
> Disable FireWall
>
> Turn OFF System Restore
>
> Turn on Automatic Update Services
>
> WSUS Isando MHQ
>
>
>
> The following GPOs were not applied because they were filtered out
>
> -------------------------------------------------------------------
>
> Office 2007 Policy
>
> Filtering: Not Applied (Empty)
>
>
>
> SAManage Install
>
> Filtering: Disabled (GPO)
>
>
>
> Office 2003 Policy
>
> Filtering: Not Applied (Empty)
>
>
>
> ADSelfHelp
>
> Filtering: Disabled (Link)
>
>
>
> Local Group Policy
>
> Filtering: Not Applied (Empty)
>
>
>
> OU_User_Move
>
> Filtering: Not Applied (Empty)
>
>
>
> The computer is a part of the following security groups:
>
> --------------------------------------------------------
>
> BUILTIN\Administrators
>
> Everyone
>
> BUILTIN\Users
>
> NT AUTHORITY\NETWORK
>
> NT AUTHORITY\Authenticated Users
>
> MGHQCZC93712F1$
>
> Domain Computers
>
>
>
>
>
> USER SETTINGS
>
> --------------
>
> CN=Eugene Tome,
>
> Last time Group Policy was applied: 3/9/2010 at 4:57:19 PM
>
> Group Policy was applied from:
> Group Policy slow link threshold: 0 kbps
>
>
>
> Applied Group Policy Objects
>
> -----------------------------
>
> Office 2003 Policy
>
> Office 2007 Policy
>
> Dameware Remote
>
> Avis Proxy 2
>
> Avis Proxy
>
> BGInfo Logon Script
>
> Default Domain Policy
>
>
>
> The following GPOs were not applied because they were filtered out
>
> -------------------------------------------------------------------
>
> WSUS Isando MHQ
>
> Filtering: Not Applied (Empty)
>
>
>
> Turn OFF System Restore
>
> Filtering: Not Applied (Empty)
>
>
>
> SAManage Install
>
> Filtering: Disabled (GPO)
>
>
>
> Set Time for Domain to PDC
>
> Filtering: Not Applied (Empty)
>
>
>
> Disable FireWall
>
> Filtering: Not Applied (Empty)
>
>
>
> Local Group Policy
>
> Filtering: Not Applied (Empty)
>
>
>
> Turn on Automatic Update Services
>
> Filtering: Not Applied (Empty)
>
>
>
> The user is a part of the following security groups:
>
> ----------------------------------------------------
>
> Domain Users
>
> Everyone
>
> Debugger Users
>
> BUILTIN\Administrators
>
> BUILTIN\Users
>
> NT AUTHORITY\INTERACTIVE
>
> NT AUTHORITY\Authenticated Users
>
> LOCAL
>
> Automotive Full Internet Access
>
> VPN Users
>
> Internet Users
>
> BMR VPN Users
>
> RAC Jutastat Users
>
> AVIS Rent a Car
>
> RAC Jutastat Users
>
>
>
> C:\Documents and Settings\Eugene.Tome>
>
>
>
>
>
>
> ------------------------------
> *Note*:This message is for the named person's use only. It may contain
> confidential, proprietary or legally privileged information. No
> confidentiality or privilege is waived or lost by any mistransmission. If
> you receive this message in error, please immediately delete it and all
> copies of it from your system, destroy any hard copies of it and notify the
> sender. You must not, directly or indirectly, use, disclose, distribute,
> print, or copy any part of this message if you are not the intended
> recipient. Avis and any of its subsidiaries each reserve the right to
> monitor all e-mail communications through its networks.Any views expressed
> in this message are those of the individual sender, except where the message
> states otherwise and the sender is authorized to state them to be the views
> of any such entity. *Thank You*.
>
| | | |
| jacquesl
Posts:26
| | 03/10/2010 2:01 PM |
| Hi all
This seems to be sorted now
Had too many exceptions in the exception list
Also did not like "http" as and exception
thanks
From: activedir-owner@mail.activedir.org
[mailto:activedir-owner@mail.activedir.org] On Behalf Of Chris Mosteller
Sent: Wednesday, March 10, 2010 3:52 PM
To: activedir@mail.activedir.org
Subject: Re: [ActiveDir] GPO Not working
What is the exact name of your new policy that you created?
Also, are the user accounts AND computer accounts in the same OU, as you
are applying a "user setting" GPO to what appears to be an OU with
computers in it. With that said, have you tried enabling "loopback
policy processing" with the merge setting?
Thanks.
Chris
On Wed, Mar 10, 2010 at 5:45 AM, Jacques Liebenberg
<Jacques.Liebenberg@avis.co.za> wrote:
Hi All
Please help
Urgent problem
From: Jacques Liebenberg
Sent: Wednesday, March 10, 2010 9:52 AM
To: 'activedir@mail.activedir.org'
Subject: GPO Not working
* Hi
We have 63 win 2003 R2 dc in our networking and about 4800 computers.
The problem I have is that some of the user gpo's are not applying on XP
sp2 computers.
This is what I have done so far
1 created a new internet gpo
2 Logon to the xp pc and the gpo does not apply I run a gpo result and
force and the gpo shows as applied.
3 check the event log no errors
4 go to a other xp pc and logon to the pc with the same user name and
the gpo applies
5 log on to a 3rd xp pc with the same username and then it does not
apply
6 this is not the only user I have with this problem
7 all of the xp pc's that i test tested logs on to the same dc
8 recreated user profile same problem
9 this is very random
the only thing that happened in the last 3 months is that we had a ADRAP
done by Microsoft and we had to make some changes to the domain
also all of the computer gpo's applies on the computers even if i add a
new one it is only user gpo's
also logon time has go up
also i have 227 sites in ad and not all of them has dc
i have about 7 to 10 user gpo's per user
thanks who can help Please
here is a gp result on a user that does not work the GPO is there.
C:\Documents and Settings\Eugene.Tome>gpresult
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 3/9/2010 at 5:23:15 PM
RSOP results for \Eugene.Tome on MGHQCZC93712F1 : Logging Mode
---------------------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name:
Domain Type: Windows 2000
Site Name: ZA-Core-Isando-MHQ
Roaming Profile:
Local Profile: C:\Documents and Settings\Eugene.Tome
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=MGHQCZC93712F1,
Last time Group Policy was applied: 3/9/2010 at 4:26:35 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
PC Restarts
Default Domain Policy
Disable FireWall
Turn OFF System Restore
Turn on Automatic Update Services
WSUS Isando MHQ
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Office 2007 Policy
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Office 2003 Policy
Filtering: Not Applied (Empty)
ADSelfHelp
Filtering: Disabled (Link)
Local Group Policy
Filtering: Not Applied (Empty)
OU_User_Move
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
MGHQCZC93712F1$
Domain Computers
USER SETTINGS
--------------
CN=Eugene Tome,
Last time Group Policy was applied: 3/9/2010 at 4:57:19 PM
Group Policy was applied from:
Group Policy slow link threshold: 0 kbps
Applied Group Policy Objects
-----------------------------
Office 2003 Policy
Office 2007 Policy
Dameware Remote
Avis Proxy 2
Avis Proxy
BGInfo Logon Script
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
WSUS Isando MHQ
Filtering: Not Applied (Empty)
Turn OFF System Restore
Filtering: Not Applied (Empty)
SAManage Install
Filtering: Disabled (GPO)
Set Time for Domain to PDC
Filtering: Not Applied (Empty)
Disable FireWall
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
Turn on Automatic Update Services
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Automotive Full Internet Access
VPN Users
Internet Users
BMR VPN Users
RAC Jutastat Users
AVIS Rent a Car
RAC Jutastat Users
C:\Documents and Settings\Eugene.Tome>
Error! Filename not specified.
________________________________
Note:This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please immediately delete it and
all copies of it from your system, destroy any hard copies of it and
notify the sender. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the
intended recipient. Avis and any of its subsidiaries each reserve the
right to monitor all e-mail communications through its networks.Any
views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorized
to state them to be the views of any such entity. Thank You.
#####################################################################################
Note:
This message is for the named person's use only. It may contain confidential,
proprietary or legally privileged information. No confidentiality or privilege
is waived or lost by any mistransmission. If you receive this message in error,
please immediately delete it and all copies of it from your system, destroy any
hard copies of it and notify the sender. You must not, directly or indirectly,
use, disclose, distribute, print, or copy any part of this message if you are not
the intended recipient. Avis and any of its subsidiaries each reserve
the right to monitor all e-mail communications through its networks.
Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorized to state them to be the
views of any such entity.
Thank You.
#####################################################################################
| | | |
| washaya
Posts:11
| | 03/22/2010 4:55 PM |
|
Return Receipt
Your RE: [ActiveDir] GPO Not working
document
:
was washaya@un.org
received
by:
at: 03/22/2010 05:29:18 PM
| | | |
|
|