Two Questions

I did not have access to my local drives on a domain user computers.  I than added domain users to the administrator group on the local computer.  Now no problems but have I now lost all power to control the actions of the users through the group policy editor??

Next when I go through the menu option on the domain controller using a menu option called Group Polcy and it states that it is changing the default domain policy for the local computer it seems to work but when I do into it through a remote station using the group policy editor pointing to the domain controller it also seems to work but neither seem to be updating the domain controller as the local version and the remote version never have the setting I set up, they only have the one I did on either the local or the remote....any ideas??? uggh...I hope you guys understand what I am saying???

How can I tell my changes are being taken and by which one?

-jfs
jsirabellaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

adamdrayerCommented:
I don't really understand your question unfortuantely.  But I will try and shed some light on the situation by explaining about Group Policy Objects(GPO)

Group Policy Objects are applied in the following order:

Local Policy
Site Policy
Domain Policy
OU Policies
  (nested OU Policy, etc...)
(Optional Loopback)

What this means is that local policies will get overridden by any site, domain, or OU policies.  Not the whole GPO, just the settings that aren't 'Not Configured'.

There is also inheiretence issues.  You can set a 'do not override' on the site, domain, or OU policies.  You can also set 'block policy inheritence' as well.

There is alot you can do with group policy, and there is alot you can screw up.  You neglected to say what version of windows your servers and clients are running.  There are a few RSOP (Resultant Set of Policy) tools that will make it very easy for you to figure out whatever you want, but you need XP to run the GP Managemnet Console.  Win2k3 has an RSOP built-in I believe.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jsirabellaAuthor Commented:
A few people pointed me in the direction of GP Management Console and I like it but they should allow you to edit policies directly in the program instead of bringing up gpedit but it does seem to be working.  I will read more of the manual and see about their templates for light management.

I believe though my problem is coming from the name of the computer vs. the username...I believe they can not be the same and have been messing me up.  I notice when I got rid of a local user with the same name as the computer name which was the same name as the domain user, it seemed to work as I expected.  

-jfs
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.