why is my homepage GPO not working?

I'm having trouble forcing a homepage in IE7 through group policy.  In my top
level OU policy (IE Zone Assignments) I have one page set to our main intranet, but in the child
OU (AC Lab Settings), I have set a teens homepage, which is not applying. The child OU policy has highest priority, but yet the homepages stays at the main intranet (as set in the IE Zone Assignments) and not the teens page (As set in the AC Lab Settings).  Attached is the RSoP for one of these users that is not defaulting to the correct homepage.  does anyone have any insight?  I'm completely stuck and don't know what else to do.
RSoP-for-ACLAB.png
shawnwaldmanmetroAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ryansotoCommented:
Did you apply this group policy to the right OU?
0
shawnwaldmanmetroAuthor Commented:
yes.  at least i do believe so with the correct security filtering.  now i haven't excluded that user from the our IE Zone assignments, but as far as I've learned, it shouldn't matter since this GPO takes precedence.
gpo-structure-for-aclab.png
0
Eskimo2704Commented:
Have you checked that the GPO isn't being over written in priority by the defaul domain GPO?
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

shawnwaldmanmetroAuthor Commented:
we don't have any URL's configured in any gpo except for the two gpo's listed in the original posting,  but i double checked and our default domain gpo has no URL configured.
0
SamCaldwellCommented:
I would create an OU for this GPO.  Apply the GPO.  Add a security group to the GPO called "IE HOMEPAGE"
Add the appropriate members to the security group.  This is scalable.  

Starting with a good design is crucial, especially in practical, scalable situations.  (Reference: http://technet.microsoft.com/en-us/library/cc736938.aspx).

Next, for troubleshooting, I would run the model use RSoP (Resultant Set of Policy snapin) to identify how your policy is being applied.  (Reference: http://technet.microsoft.com/en-us/library/cc783273.aspx).
0
shawnwaldmanmetroAuthor Commented:
Thanks for your suggestion SamCaldwell.  But there is an OU already created specifically for this GPO.  If you look at my screen shots in previous posts you can see this.  But your links were helpful.  I changed the security filtering to authenticated users for this OU, which shouldn't really make a difference since before I was specifiying the user.  I also enforced this GPO.  The homepage is still wrong and need another solution.
0
SamCaldwellCommented:
I sincerely apologize...too little sleep and too many hours yesterday.  I simply overlooked the obvious...

Again.  My apologies.

Have you verified that the GPO propagated down to the client?  Have you tried running gpupdate /force or rebooting the affected system?
0
shawnwaldmanmetroAuthor Commented:
Yes I have done this, about a million times.  It'l like clicking the mouse button over and over even though it doesn't make things move faster.  The gpupdate /force does not work.  The GPO is running, as per the RSoP screen shot above.  The homepage and printers are the only settings linked in this GPO.  printers work fine, but of course  my issue with the homepage......
0
shawnwaldmanmetroAuthor Commented:
anyone else have any suggestions?  i'm still having this issue and have not found a solution.
0
kaos_theoryCommented:
Have you tried this on another workstation ?  
0
shawnwaldmanmetroAuthor Commented:
You know, that was actually on my list to work on today...I have tried this GPO on another OU, runs, but the homepage doesn't default correctly, even when this GPO is "enforced"  Attached are the RSOP data (screen shot 1 and 2 for acadmin). The homepage is configured correctly in the gpresult (configured for the AC Lab Settings), but when opening internet explorer, the page defaults to the wrong one (as set in the IE Zone Assignments - which runs for the entire company).

So just for the fun of it, I changed my default homepage in my IT Settings GPO, which runs much like the AC Lab settings.  And it works just fine and the page defaults correctly for me.  See the third screenshot for this data.

So it appears that my "default desktop settings" GPO, which originally had a homepage set, but was unchecked for customization, thus disabling it, since the URL was already configured inside the IE Zone Settings GPO is causing the issue.   Any ideas how to get around this without enabling the URL in the "default desktop settings" GPO? (you can see this disabled in the second screenshot)
rsop-for-acadmin.png
precedence-for-acadmin.png
it-homepage-defaults.png
0
ParanormasticCryptographic EngineerCommented:
You mentioned that the GPO for 'IE Zone' is being set at the parent OU and the 'AC Lab' is being set at the child OU.  Since there would be conflict for the same setting, the parent OU or domain policy would win.  Setting precedence or link order takes effect within the same OU only and has no bearing against the normal inheritance chain (local, sites, domain, OU, child OU)

You could try blocking group policy inheritance on the child OU.  If you already did that, double check that you don't have Enforced set on the parent OU which would prevent blocking inheritance.
0
ParanormasticCryptographic EngineerCommented:
If that's still giving you problems, check this out and give it a whirl:
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/2f1314d6-d47f-4a1d-8dce-76aeeb643860/
0
shawnwaldmanmetroAuthor Commented:
Paranormastic, Thanks for your suggestions but if the IE Zone assignment being on the parent OU was causing the issue, then my IT setting homepage that I created would not have worked according to your theory, but it did.  The Child OU's as far as I know and according to the gpresults were taking precedence over the parent IE Zone Settings GPO.  And my child OU GPO's were "enforced" where as the parent level GPO was not.  I know a bunch of this is hard to relay over newsgroups and forums since you can't see what I see as well.

All in all I did figure this out.  The only difference between my two tests was my third GPO, my "default desktop settings."  In the IE Admin Template for 7.0, there was a setting in there "disabling changing home page settings" was enabled on the GPO that was running for my ac lab OU but not for my IT OU.  Once this setting was changed to "disabled"  it works perfectly!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.