Charles, I'd suggest strongly not to conclude that there's a problem simply because of this output. If you aren't seeing errors, there is no problems on the system (i.e. incorrect behavior, crashing, improper application of GPO or missing / incorrect settings) and the Application and System Event logs are not showing anything other than the successful SceCli messages - I'd not get too worried.
Now, Tony mentioned that it's not a good idea to mess with the Default policies in Windows 2000. He's right, but I'm going to contradict my good friend Mr. Murray. I don't know of anything that READS the NAME of the policy. Much like a user, group or computer being identified by SID rather than display name, the Default policies are identified by GUID. You cannot delete the Default policies and recreate them by simply creating a new policy and naming them Default Domain Policy or Default Domain Controller Policy and expect them to work. The GUID must be exact. So, IMHO, if you want to rename it - you can. However, I'd leave it alone lest you forget what it really is and delete it - which, sadly, would be much worse than the report of duplicate objects in GPRESULT ======================================= Wait - I just thought of a situation where I have seen duplicate GPO names in GPRESULT. This was caused by a conflict resolved object that was visible via GPRESULT. I found it by using ADSIEdit and drilling into the Domain NC/System/Policies node. Here I found an object prefixed with a CNF: that needed to be removed. Caveat - this IN NOT an operation to be taken lightly! AND! In my case it was NOT the Default Domain Policy. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charles Campbell Sent: Thursday, July 31, 2003 1:19 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GP overridden Well, I must have a serious problem... I changed the name back to "Default Domain Policy". Rebooted the server. Waited approximately 30 minutes, then ran GPResult from the Server. Below is the result: (More info after results) User Group Policy results for: CN=Administrator,CN=Users,DC= XXXXX,DC=com Domain Name: XXXXX Domain Type: Windows 2000 Site Name: Default-First-Site-Name Roaming profile: (None) Local profile: C:\Documents and Settings\Administrator The user is a member of the following security groups: XXXXX\Domain Users \Everyone BUILTIN\Administrators BUILTIN\Users NT AUTHORITY\INTERACTIVE NT AUTHORITY\Authenticated Users \LOCAL XXXXX \Group Policy Creator Owners XXXXX \Domain Admins XXXXX \Schema Admins XXXXX \Enterprise Admins XXXXX \OWS_4001231503_admin XXXXX \OLAP Administrators ############################################################### Last time Group Policy was applied: Thursday, July 31, 2003 at 2:09:33 PM Group Policy was applied from: mainserver.mainserver.com =============================================================== The user received "Registry" settings from these GPOs: LAN Policy LAN Policy =============================================================== The user received "Internet Explorer Branding" settings from these GPOs: Default Domain Policy Default Domain Policy ############################################################### Computer Group Policy results for: CN=MAINSERVER,OU=Domain Controllers,DC=XXXXX,DC=com Domain Name: XXXXX Domain Type: Windows 2000 Site Name: Default-First-Site-Name The computer is a member of the following security groups: BUILTIN\Administrators \Everyone BUILTIN\Users BUILTIN\Administrators NT AUTHORITY\NETWORK NT AUTHORITY\Authenticated Users XXXXX\MAINSERVER$ XXXXX \Domain Controllers XXXXX \Domain Admins XXXXX \Schema Admins XXXXX \Enterprise Admins NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS XXXXX \DnsAdmins ############################################################### Last time Group Policy was applied: Thursday, July 31, 2003 at 2:05:14 PM Group Policy was applied from: XXXXX.XXXXX.com =============================================================== The computer received "Registry" settings from these GPOs: Local Group Policy LAN Policy LAN Policy =============================================================== The computer received "Security" settings from these GPOs: Local Group Policy Default Domain Policy Default Domain Policy =============================================================== The computer received "EFS recovery" settings from these GPOs: Local Group Policy Default Domain Policy Default Domain Policy Now, I have checked under AD/ServerName/Properties/Group Policy... There is only "Default Domain Policy" listed. I don't know why it's showing up twice, nor do I know where else to look for this problem. Thanks. Charles -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Thursday, July 31, 2003 10:29 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GP overridden I believe Justin asked the question because the gpresult output shows the LAN Policy twice in various places. This is unusual, e.g ************ Computer Received "Registry" Settings from these GPOs: Local Group Policy LAN Policy LAN Policy ************ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
