RE: [ActiveDir] Group Policy not working?!
GPOs only apply to users and/or computer accounts and nothing else! Said in another way: the objects to be managed (users and/or computers) must fall within the scope of management (SOM) of a GPO that is linked to some OU (the objects must be directly in the OU the GPO is linked to or in a sub-OU of it) using security groups is an option for security filtering.so let's say you have an OU with 1000 users and you link a GPO to that same OU (remember the SOM!), BUT you only want that the GPO applies to the first 500 users and not the second 500 users. One of the ways to do that is to create a security group somewhere in the domain (I mean: it's location is not important for this to work) and give that security group READ and APPLY to the GPO that is linked to the OU with the objects it should apply to. Don't forget to remove READ and APPLY for authenticated users! Now, to make sure the GPO only aplies to the first 500 users, make sure the first 500 users are members of that security group that has READ and APPLY to that GPO! The second 500 users will never look at or apply that GPO because they will not see it cheers, jorge From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]Sent: Friday, June 16, 2006 12:40To: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Group Policy not working?! Windows 2000 Domain in Native Mode (Test Environment) 1 Domain 3 OU's (FactoryOU, RaceTeamOU, TestTeamOU) In each of the OU's is a Security Group - Global In each of the groups we have placed the users & computers relevant to that group. The default domain policy takes effect with no problems but we are unable to get the Factory, RaceTeam or TestTeam policy's to work unless we take them out of the security group and place them directly into the OU. Do GPO's work with groups or is it only users? Chris. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
RE: [ActiveDir] Group Policy not working?!
I didn’t exactly make that clear, did I? The group policy will apply to the user object located within their site, domain and OU. You can however stop or allow specific policies from taking effect by using the ACL on each policy. Rob Robert Rutherford QuoStar Solutions Limited The Enterprise Pavilion Fern Barrow Wallisdown Poole Dorset BH12 5HH T: +44 (0) 8456 440 331 F: +44 (0) 8456 440 332 M: +44 (0) 7974 249 494 E: [EMAIL PROTECTED] W: www.quostar.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Rutherford Sent: 16 June 2006 12:04 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy not working?! Will need to be the user object…. Not security groups. You can use sec groups to filter. Robert Rutherford QuoStar Solutions Limited The Enterprise Pavilion Fern Barrow Wallisdown Poole Dorset BH12 5HH T: +44 (0) 8456 440 331 F: +44 (0) 8456 440 332 M: +44 (0) 7974 249 494 E: [EMAIL PROTECTED] W: www.quostar.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 16 June 2006 11:40 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group Policy not working?! Windows 2000 Domain in Native Mode (Test Environment) 1 Domain 3 OU's (FactoryOU, RaceTeamOU, TestTeamOU) In each of the OU's is a Security Group - Global In each of the groups we have placed the users & computers relevant to that group. The default domain policy takes effect with no problems but we are unable to get the Factory, RaceTeam or TestTeam policy's to work unless we take them out of the security group and place them directly into the OU. Do GPO's work with groups or is it only users? Chris.
RE: [ActiveDir] Group Policy not working?!
Will need to be the user object…. Not security groups. You can use sec groups to filter. Robert Rutherford QuoStar Solutions Limited The Enterprise Pavilion Fern Barrow Wallisdown Poole Dorset BH12 5HH T: +44 (0) 8456 440 331 F: +44 (0) 8456 440 332 M: +44 (0) 7974 249 494 E: [EMAIL PROTECTED] W: www.quostar.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 16 June 2006 11:40 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group Policy not working?! Windows 2000 Domain in Native Mode (Test Environment) 1 Domain 3 OU's (FactoryOU, RaceTeamOU, TestTeamOU) In each of the OU's is a Security Group - Global In each of the groups we have placed the users & computers relevant to that group. The default domain policy takes effect with no problems but we are unable to get the Factory, RaceTeam or TestTeam policy's to work unless we take them out of the security group and place them directly into the OU. Do GPO's work with groups or is it only users? Chris.
RE: [ActiveDir] Group policy not working on assigned app
Alex-
There are a variety of causes for these errors. They are kind of
catch-alls for a client's inability to access the SYSVOL portion of a
GPO. Here are some things to look for:
--TCP/IP Netbios Helper service not running on client (needs to be)
--DNS not properly configured on client to resolve DCs
--FRS not replicating SYSVOL properly to all DCs (if DC that client is
hitting has incomplete SYSVOL replica, you'll get these errors)
--Permissions on FRS replicas are 'whacked', preventing read access by
machine or user
I'm guessing that if GPMC can't find the SYSVOL path, then its one of
these issues above. However, it could also be caused by network timing
issues on the client. If the above don't pan out, check out one of
these:
http://support.microsoft.com/default.aspx?scid=kb;en-us;840669
http://support.microsoft.com/kb/239924
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alborzfard,
Alex
Sent: Wednesday, January 11, 2006 10:04 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Group policy not working on assigned app
I'm sure I'm not the first one to have problem w. GP in regards to
assign/publish apps.
The problem I'm having is the app assigned under GP won't run.
After running the GP modeling wizard under GPMC it says it couldn't load
GP because it couldn't find the path. Then in DC's event log, it records
events 1030 & 1058. Event 1058 is pointing to a path:
(domain\sysvol\domain\Policies\{A}& file (gpt.ini) that doesn't
exist on the DC.
Any quick solutions before I run google this and check MS KBs?
Thanks
--Alex Alborzfard
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Group Policy Not working
I can attest for the poicyreporter it really does a good job. Also for managing logging I think Darren (GPOGuy) Mar Elia has a great little solution he provides for dealing with logging (http://www.gpoguy.com/Tools.htm#GPO%20Logging%20ADM). He has a few other cool things up there as well… Regarding your issue a couple of observations and questions… The GPResults are from 30 minutes after the last Group Policy refresh occurred, I assume you are forcing an update to test?… Did you look at bostondc2.healthnet.org to see that everything was in place? Did you try to run the script manually and did it succeed? Just curious because it looks good but remember that the script is not the policy. The fact that autoprint showed up in the results is really just showing you that the GPO applied which configured the machine to execute a certain script during a certain event. This report does not tell you if that was configured just that the GPO was processed. Lastly, what does the script look like? Kevin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, April 28, 2005 6:07 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Group Policy Not working Hi Christine, Seems like it should work! I always find the UserEnv.Log is a good place to start. If you activate Detailed logging, then logon to the workstation it provides detailed info in the file in %windir%\debug\usermode\userenv.log. Here is a reference to activating the logging: http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=""> Unfortunately, the log is a little confusing to the uninitiated, but it contains all of the steps involved in GPO processing, searching each OU for GPO's, checking access to each GPO, finding active extensions in each policy then actually processing them. To assist in this, we have a free utility that will process the log and display it in a meaningful way. It also provides a button to turn on and off detailed logging. http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml Policy Management Software:- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor:- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml - Original Message - From: Christine Allen To: 'ActiveDir@mail.activedir.org' Sent: Friday, April 29, 2005 2:03 AM Subject: RE: [ActiveDir] Group Policy Not working It's below. the policy is named autoprint and it shows up. Microsoft Windows 2000 [Version 5.00.2195] (C) Copyright 1985-2000 Microsoft Corp. C:\Documents and Settings\arhyppolite>GPRESULT /USER Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool Copyright (C) Microsoft Corp. 1981-1999 Created on Thursday, April 28, 2005 at 11:58:54 AM Operating System Information: Operating System Type: Professional Operating System Version: 5.0.2195.Service Pack 4 Terminal Server Mode: Not supported ### User Group Policy results for: CN=Armide Hyppolite,OU=Claims,DC=healthnet,DC=org Domain Name: HEALTHNET Domain Type: Windows 2000 Site Name: Default-First-Site-Name Roaming profile: (None) Local profile: C:\Documents and Settings\arhyppolite The user is a member of the following security groups: HEALTHNET\Domain Users \Everyone BUILTIN\Power Users BUILTIN\Users NT AUTHORITY\INTERACTIVE NT AUTHORITY\Authenticated Users \LOCAL HEALTHNET\Claims HEALTHNET\Claims Adjudication HEALTHNET\Facets Load Balancing HEALTHNET\BMCHP everyone ### Last time Group Policy was applied: Thursday, April 28, 2005 at 11:23:37 AM Group Policy was applied from: bostondc2.healthnet.org === The user received "Registry" settings from these GPOs: bmchppolicy === The user received "Scripts" settings from these GPOs: autoprint ### Computer Group Policy results f
RE: [ActiveDir] Group Policy Not working
I would think you could use a batch file with only "cscript scriptname.vbs" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Friday, April 29, 2005 9:39 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy Not working That's actually a relatively common security measure. I know our company and our parent company use that to prevent execution of malicious code. Since we're designing our GP architecture now, and will be using VBS, it's good to know that it's an issue. It will affect a LOT of machines in our enterprise. I wonder, short of changing the file association, if there's a way to execute the scripts by using a command along the lines of "cscript scriptname.vbs" instead of just calling a file open and using the default association... I seem to remember seeing a way to do that, but haven't looked at it at all yet. That will definitely be part of our testing... :-) ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Christine Allen > Sent: Friday, April 29, 2005 6:50 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Group Policy Not working > > Thanks to all for your help. We resolved the issue. Turns > out (I have no idea how) on certain desktops vbs scripts > were associated with notepad. > > -Original Message- > From: Christine Allen [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 28, 2005 12:49 PM > To: 'ActiveDir@mail.activedir.org' > Subject: RE: [ActiveDir] Group Policy Not working > > > The script runs in the background and I do not see it run. > > I copied the VBS script to the local computer and when > I try to run it, it opens the script to view the language it > does not run. > Nothing in event view, which I find weird. > > When I run the gpresult /user, I do see the gpo listed in there. > > What locally could be preventing the script from running? > > Thanks for your help! > > -Original Message- > From: Peter Jessop [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 28, 2005 12:20 PM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] Group Policy Not working > > > Does the script not run or does it run but not properly? > Are there any clues in the event log? > Can you run the script manually from the workstation? > Are they receiving the GP over a WAN? > > > > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Group Policy Not working
That's actually a relatively common security measure. I know our company and our parent company use that to prevent execution of malicious code. Since we're designing our GP architecture now, and will be using VBS, it's good to know that it's an issue. It will affect a LOT of machines in our enterprise. I wonder, short of changing the file association, if there's a way to execute the scripts by using a command along the lines of "cscript scriptname.vbs" instead of just calling a file open and using the default association... I seem to remember seeing a way to do that, but haven't looked at it at all yet. That will definitely be part of our testing... :-) ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ** > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Christine Allen > Sent: Friday, April 29, 2005 6:50 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] Group Policy Not working > > Thanks to all for your help. We resolved the issue. Turns > out (I have no idea how) on certain desktops vbs scripts > were associated with notepad. > > -Original Message- > From: Christine Allen [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 28, 2005 12:49 PM > To: 'ActiveDir@mail.activedir.org' > Subject: RE: [ActiveDir] Group Policy Not working > > > The script runs in the background and I do not see it run. > > I copied the VBS script to the local computer and when > I try to run it, it opens the script to view the language it > does not run. > Nothing in event view, which I find weird. > > When I run the gpresult /user, I do see the gpo listed in there. > > What locally could be preventing the script from running? > > Thanks for your help! > > -Original Message- > From: Peter Jessop [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 28, 2005 12:20 PM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] Group Policy Not working > > > Does the script not run or does it run but not properly? > Are there any clues in the event log? > Can you run the script manually from the workstation? > Are they receiving the GP over a WAN? > > > > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Group Policy Not working
Thanks to all for your help. We resolved the issue. Turns out (I have no idea how) on certain desktops vbs scripts were associated with notepad. -Original Message-From: Christine Allen [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:49 PMTo: 'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Group Policy Not working The script runs in the background and I do not see it run. I copied the VBS script to the local computer and when I try to run it, it opens the script to view the language it does not run. Nothing in event view, which I find weird. When I run the gpresult /user, I do see the gpo listed in there. What locally could be preventing the script from running? Thanks for your help! -Original Message-From: Peter Jessop [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group Policy Not workingDoes the script not run or does it run but not properly?Are there any clues in the event log?Can you run the script manually from the workstation?Are they receiving the GP over a WAN?
Re: [ActiveDir] Group Policy Not working
Hi Christine, Seems like it should work! I always find the UserEnv.Log is a good place to start. If you activate Detailed logging, then logon to the workstation it provides detailed info in the file in %windir%\debug\usermode\userenv.log.Here is a reference to activating the logging:http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url="">Unfortunately, the log is a little confusing to the uninitiated, but it contains all of the steps involved in GPO processing, searching each OU forGPO's, checking access to each GPO, finding active extensions in each policy then actually processing them. To assist in this, we have a free utility that will process the log and display it in a meaningful way. It also provides a button to turn on and off detailed logging.http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml Policy Management Software:-http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtmlADM Template Editor:-http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtmlPolicy Log Reporter(Free)http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml - Original Message - From: Christine Allen To: 'ActiveDir@mail.activedir.org' Sent: Friday, April 29, 2005 2:03 AM Subject: RE: [ActiveDir] Group Policy Not working It's below. the policy is named autoprint and it shows up. Microsoft Windows 2000 [Version 5.00.2195](C) Copyright 1985-2000 Microsoft Corp. C:\Documents and Settings\arhyppolite>GPRESULT /USERMicrosoft (R) Windows (R) 2000 Operating System Group Policy Result toolCopyright (C) Microsoft Corp. 1981-1999 Created on Thursday, April 28, 2005 at 11:58:54 AM Operating System Information: Operating System Type: ProfessionalOperating System Version: 5.0.2195.Service Pack 4Terminal Server Mode: Not supported ### User Group Policy results for: CN=Armide Hyppolite,OU=Claims,DC=healthnet,DC=org Domain Name: HEALTHNET Domain Type: Windows 2000 Site Name: Default-First-Site-Name Roaming profile: (None) Local profile: C:\Documents and Settings\arhyppolite The user is a member of the following security groups: HEALTHNET\Domain Users \Everyone BUILTIN\Power Users BUILTIN\Users NT AUTHORITY\INTERACTIVE NT AUTHORITY\Authenticated Users \LOCAL HEALTHNET\Claims HEALTHNET\Claims Adjudication HEALTHNET\Facets Load Balancing HEALTHNET\BMCHP everyone ### Last time Group Policy was applied: Thursday, April 28, 2005 at 11:23:37 AMGroup Policy was applied from: bostondc2.healthnet.org === The user received "Registry" settings from these GPOs: bmchppolicy ===The user received "Scripts" settings from these GPOs: autoprint ### Computer Group Policy results for: CN=AHYPPOLITE,OU=Desktop Computers,DC=healthnet,DC=org Domain Name: HEALTHNET Domain Type: Windows 2000 Site Name: Default-First-Site-Name The computer is a member of the following security groups: BUILTIN\Administrators \Everyone BUILTIN\Users NT AUTHORITY\NETWORK NT AUTHORITY\Authenticated Users HEALTHNET\AHYPPOLITE$ HEALTHNET\Domain Computers ### Last time Group Policy was applied: Thursday, April 28, 2005 at 11:40:54 AMGroup Policy was applied from: bostondc2.healthnet.org === The computer received "Registry" settings from these GPOs: Local Group Policy bmchppolicy Default Domain Policy Updates ===The computer received "Scripts" settings from these GPOs: bmchppolicy ===The computer received "Security" settings from these GPOs: Local Group Policy Default Domain Policy Updates =
RE: [ActiveDir] Group Policy Not working
A couple thoughts for you: - It looks like the .vbs extension is associated with notepad or another editor on the computer you tested, which is why it opened for viewing or editing. Your logon script should be setup to call the Windows Scripting Host explicitly with the path to the script file. For example "cscript.exe c:\scripts\map-printer.vbs". - I vaguely remember having problems a few years ago when I started creating logon scripts when trying to map drives or printers (can't recall which). These were all fixed by installing the latest version of the Windows Scripting Host. You can download WSH 5.6 here: http://msdn.microsoft.com/library/default.asp?url="">. - In your script you might want to create a text log file that records the results of each action. If the log file isn't present, you will know the script didn't even run. If it is present, it should have the information you need to do further debugging. Jeff From: Christine Allen [mailto:[EMAIL PROTECTED] Sent: Thursday, April 28, 2005 9:49 AMTo: 'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Group Policy Not working The script runs in the background and I do not see it run. I copied the VBS script to the local computer and when I try to run it, it opens the script to view the language it does not run. Nothing in event view, which I find weird. When I run the gpresult /user, I do see the gpo listed in there. What locally could be preventing the script from running? Thanks for your help! -Original Message-From: Peter Jessop [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group Policy Not workingDoes the script not run or does it run but not properly?Are there any clues in the event log?Can you run the script manually from the workstation?Are they receiving the GP over a WAN? ConfidentialThis e-mail and any files transmitted with it are the propertyof Belkin Corporation and/or its affiliates, are confidential,and are intended solely for the use of the individual orentity to whom this e-mail is addressed. If you are not oneof the named recipients or otherwise have reason to believethat you have received this e-mail in error, please notify thesender and delete this message immediately from your computer.Any other use, retention, dissemination, forwarding, printingor copying of this e-mail is strictly prohibited.
Re: [ActiveDir] Group Policy Not working
Microsoft antispyware? Norton antivirus?
RE: [ActiveDir] Group Policy Not working
Can you share what the script is doing? Also, it might be worthwhile to put some debugging into it to see where it fails and with what messages. If you're not familiar with debugging in VBScript, then add the following statement to the beginning of your script: On Error Resume Next and then after each major operation that "does something" that isn't just variable assignment (e.g. after sets or gets) put the following if then: If err <> 0 then Wscript.echo err.message End if And then see where it bails and with what message. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christine AllenSent: Thursday, April 28, 2005 9:49 AMTo: 'ActiveDir@mail.activedir.org'Subject: RE: [ActiveDir] Group Policy Not working The script runs in the background and I do not see it run. I copied the VBS script to the local computer and when I try to run it, it opens the script to view the language it does not run. Nothing in event view, which I find weird. When I run the gpresult /user, I do see the gpo listed in there. What locally could be preventing the script from running? Thanks for your help! -Original Message-From: Peter Jessop [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group Policy Not workingDoes the script not run or does it run but not properly?Are there any clues in the event log?Can you run the script manually from the workstation?Are they receiving the GP over a WAN?
RE: [ActiveDir] Group Policy Not working
The script runs in the background and I do not see it run. I copied the VBS script to the local computer and when I try to run it, it opens the script to view the language it does not run. Nothing in event view, which I find weird. When I run the gpresult /user, I do see the gpo listed in there. What locally could be preventing the script from running? Thanks for your help! -Original Message-From: Peter Jessop [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 12:20 PMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Group Policy Not workingDoes the script not run or does it run but not properly?Are there any clues in the event log?Can you run the script manually from the workstation?Are they receiving the GP over a WAN?
Re: [ActiveDir] Group Policy Not working
Does the script not run or does it run but not properly? Are there any clues in the event log? Can you run the script manually from the workstation? Are they receiving the GP over a WAN?
RE: [ActiveDir] Group Policy Not working
It's below. the policy is named autoprint and it shows up. Microsoft Windows 2000 [Version 5.00.2195](C) Copyright 1985-2000 Microsoft Corp. C:\Documents and Settings\arhyppolite>GPRESULT /USERMicrosoft (R) Windows (R) 2000 Operating System Group Policy Result toolCopyright (C) Microsoft Corp. 1981-1999 Created on Thursday, April 28, 2005 at 11:58:54 AM Operating System Information: Operating System Type: ProfessionalOperating System Version: 5.0.2195.Service Pack 4Terminal Server Mode: Not supported ### User Group Policy results for: CN=Armide Hyppolite,OU=Claims,DC=healthnet,DC=org Domain Name: HEALTHNET Domain Type: Windows 2000 Site Name: Default-First-Site-Name Roaming profile: (None) Local profile: C:\Documents and Settings\arhyppolite The user is a member of the following security groups: HEALTHNET\Domain Users \Everyone BUILTIN\Power Users BUILTIN\Users NT AUTHORITY\INTERACTIVE NT AUTHORITY\Authenticated Users \LOCAL HEALTHNET\Claims HEALTHNET\Claims Adjudication HEALTHNET\Facets Load Balancing HEALTHNET\BMCHP everyone ### Last time Group Policy was applied: Thursday, April 28, 2005 at 11:23:37 AMGroup Policy was applied from: bostondc2.healthnet.org === The user received "Registry" settings from these GPOs: bmchppolicy ===The user received "Scripts" settings from these GPOs: autoprint ### Computer Group Policy results for: CN=AHYPPOLITE,OU=Desktop Computers,DC=healthnet,DC=org Domain Name: HEALTHNET Domain Type: Windows 2000 Site Name: Default-First-Site-Name The computer is a member of the following security groups: BUILTIN\Administrators \Everyone BUILTIN\Users NT AUTHORITY\NETWORK NT AUTHORITY\Authenticated Users HEALTHNET\AHYPPOLITE$ HEALTHNET\Domain Computers ### Last time Group Policy was applied: Thursday, April 28, 2005 at 11:40:54 AMGroup Policy was applied from: bostondc2.healthnet.org === The computer received "Registry" settings from these GPOs: Local Group Policy bmchppolicy Default Domain Policy Updates ===The computer received "Scripts" settings from these GPOs: bmchppolicy ===The computer received "Security" settings from these GPOs: Local Group Policy Default Domain Policy Updates ===The computer received "EFS recovery" settings from these GPOs: Local Group Policy Default Domain Policy C:\Documents and Settings\arhyppolite>GPRESULT /USER -Original Message-From: Bruyere, Michel [mailto:[EMAIL PROTECTED]Sent: Thursday, April 28, 2005 11:44 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Group Policy Not working What does GPresult return? De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Christine AllenEnvoyé : Thursday, April 28, 2005 11:35 AMÀ : 'ActiveDir@mail.activedir.org'Objet : [ActiveDir] Group Policy Not working Hello, My environment is windows 2000 Ad. I have a GPO that runs a logon script that attaches printers by ou. It's working for most, but not a few individuals. No errors in the event log. They are in the correct ou. They are logging into the domain. Any other areas I should check? I'm lost. Many Thanks -Christine Christine N. AllenSystems EngineerBMC HealthNet PlanOne Design Center PlaceBoston, MA 02210 617-748-6034617-293-4407
Re: [ActiveDir] Group Policy Not working
The first thing you should check is to see if the GP is being applied. You can do this on w2K by running gpresult on the hosts where it's not working. You should also check they do not have script blocking software installed. Regards Peter Jessop
RE: [ActiveDir] Group Policy Not working
What does GPresult return? De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Christine Allen Envoyé : Thursday, April 28, 2005 11:35 AM À : 'ActiveDir@mail.activedir.org' Objet : [ActiveDir] Group Policy Not working Hello, My environment is windows 2000 Ad. I have a GPO that runs a logon script that attaches printers by ou. It's working for most, but not a few individuals. No errors in the event log. They are in the correct ou. They are logging into the domain. Any other areas I should check? I'm lost. Many Thanks -Christine Christine N. Allen Systems Engineer BMC HealthNet Plan One Design Center Place Boston, MA 02210 617-748-6034 617-293-4407
