Solved

group policy trouble

Posted on 2004-10-26
211 Views
Last Modified: 2010-04-14
We have a windows 2000 AD and have applied a group policy to a container.  The policy installs office 2003 and is applied to the computer, not user.  Why would most machines receive it and others not.  Any help and troubleshooting mechanisms would be greatly appreciated.
0
Question by:teknorapex
    12 Comments
     
    LVL 16

    Accepted Solution

    by:
    teknorapex
    The best troubleshooter for GPOs is the GPMC

    Download the GPMC from here:
    http://www.microsoft.com/downloads/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

    It is designed for W2k3, but will run on W2k DCs with a few limitations.

    This will tell you why some machines are not receiving the policy

    Cheers

    JamesDS
    0
     

    Author Comment

    by:teknorapex
    I downloaded the gmpc, but I need to get an XP machine or 2003 server machine to install it on.  Is there anything else that I can do in the mean time?
    0
     
    LVL 18

    Expert Comment

    by:luv2smile
    The resultant set of policy tool is also a good tool to be able to troubleshoot group policy.

    http://www.serverwatch.com/tutorials/article.php/2069021
    0
     
    LVL 18

    Expert Comment

    by:luv2smile
    The article says 2003, but this is availabe in 2000 as well as on xp machines
    0
     
    LVL 18

    Expert Comment

    by:luv2smile
    gpresult.exe   can also be helpful by running it on the machine that the policy isn't working for.
    0
     
    LVL 18

    Expert Comment

    by:luv2smile
    Which is essentiol the RSOP
    0
     
    LVL 20

    Expert Comment

    by:Debsyl99
    Hi

    Just elaborating slighlty - looks like this is pure win2k - is it? from a command prompt on machine not pulling the policy run this:

    gpresult /v - post the results if necessary

    Also check the event logs on the clients not pulling the policy in control panel, admin tools, event viewer or type eventvwr.msc at start - run, ok - often there are logs there that may give you clues. Are these clients at the same or a different site or logging on to the same server - just wondering if there are maybe policy replication issues going on or even dns resolution issues,
    Deb :))



    0
     

    Author Comment

    by:teknorapex
    yes this is a pure win2k.  The machines that are not receiving the policy seem to have the correct DNS information.  I checked the event viewer and the only thing that stands out to me is that on the machines that it worked on I notice that there are entries from the application manager, but the machines that it is not working on there are no entries from the application manager.  This service is set to start manual on ALL machines.  I tried turning this on, but that has not seemed to help either, but I just thought it might help to point us in the right direction.
    0
     

    Author Comment

    by:teknorapex
    also on one of the machines in question, if I go into the registry.  I noticed the following:

    under local machine\software\microsoft\windows\currentversion\group policy there is no app mgmt folder, but on the machines that it works their is.
    0
     
    LVL 20

    Expert Comment

    by:Debsyl99
    Hi

    It sounds like they're not getting the policy through - Have you checked on their membership of the relevant OU, and that they have read and apply group policy rights on the gpo, and also access rights to the installation folder itself - this is designed to pull an install from a network folder right?

    If the permissions are set for domain computers, then make sure that these machines are members of the domain computers group

    0
     

    Author Comment

    by:teknorapex
    I moved the computer to another container and they got the installation package immediately.  What would cause some machines to get this and some to not get it???  Most machines received the policy fine.
    0
     
    LVL 20

    Expert Comment

    by:Debsyl99
    Check what I mentioned earlier - shame you don't have xp as the gpmc is great for explaining these things. Are you using any security group filtering on the gpo? If you can, compare closely with a pc that did get the software successfully - there's something not set on the OU correctly to allow access to this policy for these specific pc's,
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    933 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now