Solved

Group Policy doesn't refresh correctly after copying profile using Copy To

Posted on 2006-07-21
2
234 Views
Last Modified: 2010-04-18
So, recently I set up an OU at my company for the user accounts that log on to computers on the manufacturing floor.  The goal is that we don't want those accounts to have internet access.  So, I used a GPO to basically point their browsers to a bogus proxy server, thereby disabling their access -- I also disabled the ability to change the proxy server.  SO, yesterday I was told by one of the managers that one of the computers in the back was going to be used by an assistant manager and needed to have internet access.  Not only that, but the assistant manager basically needed to have all of the crud that was in the profile of the internet-disabled account.  I logged on as administrator on that computer, and using my computer>properties>advanced>profiles>copy to... I copied the internet-disabled account's profile to the new user's account.  The problem is that the internet-disabling GPO is still in force!  This is after several attempts to use gpupdate, log out/log in, restart the computer, etc.  Using the group policy management console to find group policy results on that account, it says that the policy is updated with the correct one, but the proxy server settings are still set and grayed-out.  I have even moved the user account to different ou's and refreshing... nothing...  Am I missing something?!?
0
Comment
Question by:Zach_Pearce
2 Comments
 
LVL 48

Assisted Solution

by:Jay_Jay70
Jay_Jay70 earned 125 total points
ID: 17159375
i dont think you are :) unfortunately this is something that i have battled with over the last little while, when you copy a profile that has settings enforced, group policy doesnt update from there on in...

eg i had a forced background, if i copy a profile over, i can no longer force the background with GPO unless i compltelely flush the registry of all old entries...

due to this downfall i now dont do profile copying on domain accounts
0
 
LVL 3

Accepted Solution

by:
artthegeek earned 125 total points
ID: 17160235
Some suggestions and questions:
1st, verify that the user has full permissions to the profile folder & force inheritance.

I assume that the GPO is attached to an OU containing the user, not the pc acount?
Do you think that the Group Policies have replicated to all DC's yet?  (check the GPO on the other Domain Controllers).  If not, there's some troubleshooting steps we can go through.


A quick check using the RSoP snap-in may help you to verify that the GPO is reaching the PC*,

Also - One quick test would be to give the user "deny" permissions to the GPO object itself (make sure the GPO permissions have replicated 1st).


*http://support.microsoft.com/default.aspx?scid=kb;en-us;323276

Let me know if any of this helps!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now