kdr_zb229
asked on
GPO user config policies applied twice
I am new to GPO and have started implementing some new policies. The environmentn is Windows Server 2003 domain. None of my polices that are currently being applied are using loopback. The structure looks like this:
Domain/OU1(gpos: A)
OU2(gpo: B)
OU3(gpo: C, D, E, F)
UsersOU4(gpo: G, H)
DesktopsOU5(gpo I, J)
RSoP for the user looks like this:
USER SETTINGS
--------------
CN=*******/, ******,OU=IT Group,OU=Stephenville,OU=F luid Control,OU=Energy Processing,DC=NET,DC=FMCTI ,DC=COM
Last time Group Policy was applied: 1/29/2009 at 10:13:43 AM
Group Policy was applied from: ste1dc01.NET.FMCTI.COM
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-------------------------- ---
STE Browser Settings
ste1 - ie7 setting
STE1-Google Toolbar
STE1 Logon Script
STE1 Fluid Control Settings
Default Domain Policy
STE Browser Settings
ste1 - ie7 setting
STE1-Google Toolbar
STE1 Logon Script
STE1 Fluid Control Settings
Default Domain Policy
Domain/OU1(gpos: A)
OU2(gpo: B)
OU3(gpo: C, D, E, F)
UsersOU4(gpo: G, H)
DesktopsOU5(gpo I, J)
RSoP for the user looks like this:
USER SETTINGS
--------------
CN=*******/, ******,OU=IT Group,OU=Stephenville,OU=F
Last time Group Policy was applied: 1/29/2009 at 10:13:43 AM
Group Policy was applied from: ste1dc01.NET.FMCTI.COM
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
STE Browser Settings
ste1 - ie7 setting
STE1-Google Toolbar
STE1 Logon Script
STE1 Fluid Control Settings
Default Domain Policy
STE Browser Settings
ste1 - ie7 setting
STE1-Google Toolbar
STE1 Logon Script
STE1 Fluid Control Settings
Default Domain Policy
ASKER
I understand what you are saying but the problem is that the policies are being applied twice, see previous post for details. I do not want to prevent any of them from running, I just do not want them to run Twice.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
That did fix the issue but why does the policy apply twice in this situation? Shouldn't only the computer config protions of a policy be applied to the pc and the user config portion be applied at the time the user logs in? This seems that the user policy is applied during the PC config application and then again for the user.
If you don't want all of these applying then you will have to unlink them from both the OU directly or block inheritance (I don't recommend this).
Here is a pic of what I am speaking of.
HTH
GPO.jpg