Gpo to configure system services on XP SP2 Workstation

Posted on 2004-11-13
Last Modified: 2010-04-19
Hi there

I am trying to create a gpo that is applied to all hte workstations in a new 2003 domain, which will add specific global group to local admin in machine and will set the windows time service to automatically start, the restrictied groups portion of the gpo seems to work fine but I can't get any of the sevices to start, the setting do indeed change from disabled or manual to automatic but the service is not starting is it a security issue of of some kind ?
Question by:tobin_dax
    LVL 23

    Expert Comment


    Normally you should make sure that you specify a uses that can the service, else the service cannot be started due to permission problems (you could use a new creatd admin account for this purpose). Also, the service should be available on the machine, else it cannot be contacted...

    What do you see in the event viewer of the machines that need to start service automatically?? Do you see any events that point out why the service is not starting??
    LVL 51

    Accepted Solution

    Your policy is working just fine.  It has made the required changes you specified.  The service will start on next reboot, unless you use a script to go out and start the time service.

    There is a tool - sc.exe that might do what you need it to.  Batch something that hits all computers in the domain.


    Expert Comment

    You need to go to the Computer policy in AD on the container that the computer accounts are contained.  In there go to the restricted Groups in there right click add add administrators as the name...

    In the next screen in the top add the domain security group to the box run gpupdate /force on the workstation or wait for policy refresh on the workstations and Volia a domain security group will be added to the local administators  group of all workstations


    Author Comment

    sorry must not have made myslef clear, restricted groups is okay, I can't get the system services to start automatically.
    LVL 23

    Expert Comment

    And what about the event viewer?? DId you check it??
    LVL 51

    Expert Comment

    You said the services on the workstations are being set correctly to Automatic - correct?  If so, there is nothing wrong with your GPO.

    You need to start the service once you set the startup option if it is not already started.  This must be done remotely via a script - a GPO cannot do this unless you build your own entry (and that's not all too properly documented).

    The SC.EXE or NETSVC.EXE  utilities can be used to start up these services remotely.;en-us;166819


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now