RE: [ActiveDir] Group Policy Not working

[Kevin Sullivan]

I can attest for the poicyreporter it really does a good job. Also for managing logging I think Darren (GPOGuy) Mar Elia has a great little solution he provides for dealing with logging (http://www.gpoguy.com/Tools.htm#GPO%20Logging%20ADM). He has a few other cool things up there as well…   Regarding your issue a couple of observations and questions… The GPResults are from 30 minutes after the last Group Policy refresh occurred, I assume you are forcing an update to test?… Did you look at bostondc2.healthnet.org to see that everything was in place? Did you try to run the script manually and did it succeed? Just curious because it looks good but remember that the script is not the policy. The fact that autoprint showed up in the results is really just showing you that the GPO applied which configured the machine to execute a certain script during a certain event. This report does not tell you if that was configured just that the GPO was processed.   Lastly, what does the script look like?   Kevin     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, April 28, 2005 6:07 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Group Policy Not working   Hi Christine,   Seems like it should work!   I always find the UserEnv.Log is a good place to start. If you activate Detailed logging, then logon to the workstation it provides detailed info in the file in %windir%\debug\usermode\userenv.log. Here is a reference to activating the logging: http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=""> Unfortunately, the log is a little confusing to the uninitiated, but it contains all of the steps involved in GPO processing, searching each OU for GPO's, checking access to each GPO, finding active extensions in each policy then actually processing them.   To assist in this, we have a free utility that will process the log and display it in a meaningful way. It also provides a button to turn on and off detailed logging. http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml  Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml   ----- Original Message ----- From: Christine Allen To: 'ActiveDir@mail.activedir.org' Sent: Friday, April 29, 2005 2:03 AM Subject: RE: [ActiveDir] Group Policy Not working   It's below.  the policy is named autoprint and it shows up.   ************************************************************************************ Microsoft Windows 2000 [Version 5.00.2195] (C) Copyright 1985-2000 Microsoft Corp.   C:\Documents and Settings\arhyppolite>GPRESULT /USER Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool Copyright (C) Microsoft Corp. 1981-1999   Created on Thursday, April 28, 2005 at 11:58:54 AM   Operating System Information:   Operating System Type:          Professional Operating System Version:       5.0.2195.Service Pack 4 Terminal Server Mode:           Not supported   ###############################################################     User Group Policy results for:     CN=Armide Hyppolite,OU=Claims,DC=healthnet,DC=org     Domain Name:          HEALTHNET   Domain Type:          Windows 2000   Site Name:            Default-First-Site-Name     Roaming profile:      (None)   Local profile:        C:\Documents and Settings\arhyppolite     The user is a member of the following security groups:           HEALTHNET\Domain Users         \Everyone         BUILTIN\Power Users         BUILTIN\Users         NT AUTHORITY\INTERACTIVE         NT AUTHORITY\Authenticated Users         \LOCAL         HEALTHNET\Claims         HEALTHNET\Claims Adjudication         HEALTHNET\Facets Load Balancing         HEALTHNET\BMCHP everyone   ###############################################################   Last time Group Policy was applied: Thursday, April 28, 2005 at 11:23:37 AM Group Policy was applied from: bostondc2.healthnet.org   ===============================================================   The user received "Registry" settings from these GPOs:           bmchppolicy   =============================================================== The user received "Scripts" settings from these GPOs:           autoprint       ###############################################################     Computer Group Policy results for:     CN=AHYPPOLITE,OU=Desktop Computers,DC=healthnet,DC=org     Domain Name:          HEALTHNET   Domain Type:          Windows 2000   Site Name:            Default-First-Site-Name     The computer is a member of the following security groups:           BUILTIN\Administrators         \Everyone         BUILTIN\Users         NT AUTHORITY\NETWORK         NT AUTHORITY\Authenticated Users         HEALTHNET\AHYPPOLITE$         HEALTHNET\Domain Computers   ###############################################################   Last time Group Policy was applied: Thursday, April 28, 2005 at 11:40:54 AM Group Policy was applied from: bostondc2.healthnet.org   ===============================================================   The computer received "Registry" settings from these GPOs:           Local Group Policy         bmchppolicy         Default Domain Policy         Updates   =============================================================== The computer received "Scripts" settings from these GPOs:           bmchppolicy   =============================================================== The computer received "Security" settings from these GPOs:           Local Group Policy         Default Domain Policy         Updates   =============================================================== The computer received "EFS recovery" settings from these GPOs:           Local Group Policy         Default Domain Policy   C:\Documents and Settings\arhyppolite>GPRESULT /USER     -----Original Message----- From: Bruyere, Michel [mailto:[EMAIL PROTECTED] Sent: Thursday, April 28, 2005 11:44 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy Not working What does GPresult return?   De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Christine Allen Envoyé : Thursday, April 28, 2005 11:35 AM À : 'ActiveDir@mail.activedir.org' Objet : [ActiveDir] Group Policy Not working   Hello,   My environment is windows 2000 Ad.  I have a GPO that runs a logon script that attaches printers by ou.  It's working for most, but not a few individuals.  No errors in the event log.  They are in the correct ou.  They are logging into the domain.  Any other areas I should check?  I'm lost.   Many Thanks -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan One Design Center Place Boston, MA 02210 617-748-6034 617-293-4407