Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Group Policy Problem - Default Domain Policy

Posted on 2006-11-30
4
Medium Priority
?
380 Views
Last Modified: 2012-08-13
I made a change to a policy within our default domain policy. Whats strange is some computers get the update and some dont. Even though when I run a gpresult they are pulling from the same DC. When I do a gpresult, I do see two default domain policies being applied. Is that normal?  Can a group policy become corrupt?

I only have two DC in this site...

Windows 2003 Server and XP clients
0
Comment
Question by:bonadio171
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 6

Accepted Solution

by:
d50041 earned 800 total points
ID: 18046646
run gpotool.exe /dc:dcname

and review the results.

generally don't use the default domain policy or default domain server policy, make your own GPO's.

In the gpo mmc run the wizward againt a computer that is not getting the gpo.

Yes it is normal to have several GPO's listed, yes a group policy can become corrupt, its a file.
0
 
LVL 6

Assisted Solution

by:trippleO7
trippleO7 earned 800 total points
ID: 18047465
Sure policies can become corrupt, especially when making changes through the SYSVOL dir instead of using Group Policy Management Console (GPMC).

I'm unsure if you're aware, but there are two default policies created during an AD install.  Defaut Domain Policy and Default Domain CONTROLLER Policy.  The controller policy is automatically applied to the "Domain Controllers" OU and your DC's are automatically added to that.  If you are seeing two default domain policies being applied, is there a chance that you have applied both of the default policies to your computers on accident?  That could render adverse affects....

Another thing that could be happening is Policy Inheritance.  When you create an OU under your Domain name, and create a new policy to that OU, it will inherit the default domain policy as well by default, unless you explicitly told that OU to block policy inheritance.

If you haven't done so alread, I suggest downloading GPMC from MS via http://www.microsoft.com/downloads/details.aspx?familyid=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

This will give you a clear picture of what's going on as it's displayed better than the built in GP editor in 2000/2003.

Verify this info then let me know if that looks OK.  I'll go from there.  We just need to start with some basics first.

Thanks!
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Suggested Courses

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question