The event log shows: "Security policy in the Group policy objects are applied successfully."
According to GPResult: Group Policy applied Wed, July 30, 2003 at 9:23:37 AM Group Policy was applied from xxxx.xxxx.com (names changed to protect the innocent) Computer Received "Registry" Settings from these GPOs: Local Group Policy LAN Policy LAN Policy Computer Received "Security" settings from these GPOs: Local Group Policy LAN Policy Default Domain Controllers Policy LAN Policy Computer received "EFS recovery" settings from these GPOs: Local Group Policy LAN Policy LAN Policy I guess what's confusing me here is why "Local Group Policy" is being applied, and where, exactly is it? Under AD, in the xxxx.com properties box/Group Policy, I only have LAN Policy listed. Charles -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Wednesday, July 30, 2003 09:14 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] GP overridden Charles A couple of points here. 1. Group Policy is refreshed on Domain Controllers every five minutes by default. The default refresh cycle is every 90 minutes on client computers. If the event log entries you mention occur on a DC this may be perfectly normal. What are the details of the event? 2. It is not a good idea to mess with the Default Domain Policy, or for that matter the Default Domain Controllers Policy. I would recommend that you change the name back to what it was. 3. The use of "No Override" can cause confusion and should be used sparingly. Policies are applied in the order Site - Domain - OU ...but in the event of conflict the policy that was last applied takes priority. For example if you have conflicting settings in domain and OU policies the OU policy setting will win. The GPRESULT tool is quite useful for detecting which policies have been applied. Tony ---------- Original Message ---------------------------------- From: "Charles Campbell" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jul 2003 08:47:53 -0400 For some reason, there is a GP being applied on the server every 5 minutes (according to the Event Viewer). In AD, I changed the name of the "Default Group Policy" to be "LAN policy" and check-marked "No Over-Ride". Where would I look to see what is being applied? It's changing all the settings that I have set under "LAN policy" (i.e. IE branding, custom url links, etc). Thanks. Charles List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
