Solved

GPO for Computer Restriction Policy Stopped Working

Posted on 2004-08-25
9
179 Views
Last Modified: 2010-04-14
I have a computer restriction policy defined to certain computers in an OU.  This policy has been working for months.  This policy is marked enforced.  The policy restricts these computers from using Internet Explorer (path rule C:\Program Files\Internet Explorer\IEXPLORE.EXE).  This week, the policy stopped working.  All of the computers in the OU can now use Internet Explorer.  I have verified that the policy has not changed and nothing on these computers looks any different (33 computers).

I deleted the current policy and recreated it; however this had no effect.
0
Comment
Question by:Deathblow
9 Comments
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11891769
if the OS of the clients is XP run gpresult to see if the GPOs are even being pushed down to the clients
0
 

Author Comment

by:Deathblow
ID: 11892575
GPRESULT is showing that this policy is not getting pushed the clients.  We checked this; however, this was not the case as of last week.  This problem started this week.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11892744
well if the policy isn't being pushed to the clients then that is where you need to start,,, of course the policy will not be in effect if its not even being applied
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:Deathblow
ID: 11892917
That is why I asked my original question.  What may be causing this to happen?
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11892989
can you copy and paste the result of the gpresult??
0
 
LVL 1

Expert Comment

by:wlandymore
ID: 11892990
we had a problem like this on a DC, where something became corrupt with the OS on that machine and then the policies after that weren't applied in the right order, if at all. In this case, replication was also a problem spot.
0
 
LVL 22

Accepted Solution

by:
kristinaw earned 250 total points
ID: 11893345
death,

check your perms on the group policy and make sure 'apply group policy' is checked as well as 'read'.

kris.
0
 
LVL 25

Expert Comment

by:mikeleebrla
ID: 11893387
kristinaw is right,, that is one of the most often overlooked things when setting up GPOs,,, why they aren't turned on by default ill never know
0
 

Author Comment

by:Deathblow
ID: 11894406
This wasn't overlooked orginally because it worked for months; however, it appears that the permissions had been removed from authenticated users to apply group policy.  I'll have to do some internal research to see how that happened.  I am testing this now to see if this resolves the problem.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this article we will learn how to backup a VMware farm using Nakivo Backup & Replication. In this tutorial we will install the software on a Windows 2012 R2 Server.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question