• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 443
  • Last Modified:

Group Policy Not Seeing Correct Group Memberships

I have created a new group policy on my Win2K3 DC so that I have a separate Windows Update policy for servers and workstations.  I have restricted the server GP to only members of the Domain Servers security group.  I have confirmed that all servers are members of this group in AD.  However, I have one server that is not picking up the new policy.  When I run Group Policy Results, the new Windows Update policy is shown as Denied, with the reason as 'Inaccessible'.  When I look at the Security Group Membership when Group Policy Applied, the Domain Servers group is not listed.  The problem server is a Win2K3 VM running under Virtual Server 2005.  However, I have other VM's running both under VS and Hyper-V that don't have this problem.  Any help is appreciated.
0
jduehmig1
Asked:
jduehmig1
1 Solution
 
oBdACommented:
"Domain Servers" is not a default group, so you have to add that machine manually to the group. The group membership change requires a reboot of the machine before it will be recognized.
0
 
jduehmig1Author Commented:
The answer seems to be that either a reboot or waiting several days for the membershp changes to be picked up by the individual servers.  I made the GP and security group changes on Thursday and the last server picked up the changes the following Wednesday.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now