Go Premium for a chance to win a PS4. Enter to Win


Group Policy problems

Posted on 2003-11-12
Medium Priority
Last Modified: 2010-04-14

Running Windows 2000 Advanced Server (with 2 additional DCs running 2000 Server), Active Directory, and XP clients.

I'm having an issue with my group policies.  I have 2 computer labs with about 20 computers each.  In AD, I have an OU set up for the lab computers.  The OU has a group policy that has several different options defined.  My problem is that some of these settings are implemented to the clients and some aren't.  For example, the login banner is displayed on the client computers, but the defined wallpaper is not.  I can modify the login banner text and that change will make it to the clients, so I know the policy itself is being implemented, just not all of the settings of that policy.  I've printed and compared the settings of the policy to the default domain policy and can see no conflicts.  

Also, I've tried installing software packages (such as Office XP) using Group Policy, but it never works.  I've read the Microsoft Knowledge Base articles on the topic and followed the directions to the letter, tried a couple different methods, but it will not deploy the software.  That Group Policy seems to be ignored much like the other.

Does anyone have any suggestions?
Question by:Heathicus
  • 2
  • 2
LVL 11

Expert Comment

ID: 9734256
i guess this is what is happening.

you have a GPO defined for your labs with some settings and these OUs belong to a domain. the domain itself has a GPO i would assume. so if the domain does have one, it is overriding it, because the domain policy has precedence over particular OU policy. What you need to ensure is that the domain policy is not inherited to the OUs. You should see a check box, saying not to inherit GPO from domain. Check that and things should work for you.
LVL 11

Expert Comment

ID: 9734260
by the way r u from nebraska?

Accepted Solution

PaulHieb earned 500 total points
ID: 9735426
Make sure that you're applying User policys to OU's that contain users and Computer policys to OU's containing PC's. I had to learn this the hard way. Ex: in a GPO you've got Computer and User configuration. Computer settings will apply to PC's in the OU and User settings to Users. I usually make seperate GPO's and label them accordingly to apply just to users and computers. This makes it easier to figure out what you've configured later, and reuse GPO's in multiple places since they only appy what you've labeled them to do.

I believe the setting that Adonis is looking for is 'Block Policy Inheritance' to be policktickalee correct :), it should appear at the bottom of the OU props window.

Author Comment

ID: 9750778
Thanks PaulHieb.  That was my problem.  I thought that User Configuration would apply to users who logged on to the computers that were affected by the OU's group policy.  I moved the user account that is used to log onto these computers into the OU as well and everything works now.  It's not the ideal situation because I want certain user settings to be in effect on the lab computers only, but not on other computers.  And I guess I was just doing something wrong in my attempt to install office from Group Policy.  I'll keep working on it.

Expert Comment

ID: 9750945
I know exactly what you're talking about, there are certain things in the user configuration that I also would like to assign to any User logging on to a computer affected by a GPO, this functionality seems logical, but doesn't happen in the Microsoft world I guess.

One note about assigning Office to install via group policy, Microsoft recommends that you assign it via the computer configuration, so that any user logging on has access to the software, but I prefer to assign it via user, cause then when the user clicks on any office app for the first time, the installation appears and you have the chance to do a complete installation as opposed to the minimal, automated installation and not recieve 'outlook is reconfiguring itself' boxes all the time.

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Your business may be under attack from a silent enemy that is hard to detect. It works stealthily in the shadows to access and exploit your critical business information, sensitive confidential data and intellectual property, for commercial gain. T…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question