Solved

GPO for Computer Restriction Policy Stopped Working

Posted on 2004-08-25
9
180 Views
Last Modified: 2010-04-14
I have a computer restriction policy defined to certain computers in an OU.  This policy has been working for months.  This policy is marked enforced.  The policy restricts these computers from using Internet Explorer (path rule C:\Program Files\Internet Explorer\IEXPLORE.EXE).  This week, the policy stopped working.  All of the computers in the OU can now use Internet Explorer.  I have verified that the policy has not changed and nothing on these computers looks any different (33 computers).

I deleted the current policy and recreated it; however this had no effect.
0
Comment
Question by:Deathblow
9 Comments
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11891769
if the OS of the clients is XP run gpresult to see if the GPOs are even being pushed down to the clients
0
 

Author Comment

by:Deathblow
ID: 11892575
GPRESULT is showing that this policy is not getting pushed the clients.  We checked this; however, this was not the case as of last week.  This problem started this week.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11892744
well if the policy isn't being pushed to the clients then that is where you need to start,,, of course the policy will not be in effect if its not even being applied
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 

Author Comment

by:Deathblow
ID: 11892917
That is why I asked my original question.  What may be causing this to happen?
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11892989
can you copy and paste the result of the gpresult??
0
 
LVL 1

Expert Comment

by:wlandymore
ID: 11892990
we had a problem like this on a DC, where something became corrupt with the OS on that machine and then the policies after that weren't applied in the right order, if at all. In this case, replication was also a problem spot.
0
 
LVL 22

Accepted Solution

by:
kristinaw earned 250 total points
ID: 11893345
death,

check your perms on the group policy and make sure 'apply group policy' is checked as well as 'read'.

kris.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11893387
kristinaw is right,, that is one of the most often overlooked things when setting up GPOs,,, why they aren't turned on by default ill never know
0
 

Author Comment

by:Deathblow
ID: 11894406
This wasn't overlooked orginally because it worked for months; however, it appears that the permissions had been removed from authenticated users to apply group policy.  I'll have to do some internal research to see how that happened.  I am testing this now to see if this resolves the problem.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question