Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

GPO's not appling in Windows 7 for 2008 Domain

Posted on 2011-03-09
5
Medium Priority
?
565 Views
Last Modified: 2012-05-11
I am building a new domain that is comprised of 2 DCs with Server 2008 x64 R2 on them. I have created the 2 GPO's for the domain already. One for the default domain policy and one for our Bitlocker settings. I can run a gpupdate /force on the workstation and it says everything was successful, I run gpresult /h and see the output file with all my settings. If I run a gpedit.msc on the workstation I can't see any of the settings applied. Is there something different in 2008 domain that I am missing to force the workstation,which is running Win7 Enterprise, to execute the GPO settings. Any idea's would be helpful at this point.
0
Comment
Question by:MNovitsch1
  • 3
  • 2
5 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 2000 total points
ID: 35087960
When you run gpedit.msc on a workstation, you are seeing the Local policy settings, not the Domain policies. All gpedit.msc does is display the settings that reside in the policy, it doesn't display the actual group policies that are being applied to the workstation. In order to see the results of applying your domain group policy to the workstation, you'd have to run the gpresult tool, not gpedit.msc.
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 35087994
OTOH, if you want to see/edit domain group policies from a workstation, you can do so by installing the Group Policy Management Console on the workstation and opening the domain group policy from that management console. But again, you are seeing the policy settings, not the result of the policy being applied to the workstation.
0
 

Author Comment

by:MNovitsch1
ID: 35088099
That's different then XP then because XP would gray it out.  Yeah I got the admin tool pack for windows 7 already loaded on it. I'll review my GPO then and go from there. Thanks for the help. I'll post back once I find out more information.
0
 

Author Comment

by:MNovitsch1
ID: 35088372
Well I was an idiot and thought I updated the GPO on the 2008 domain and the 2003, but only did the 2003 domain. Thank for the information on the GPO settings though.
0
 

Author Closing Comment

by:MNovitsch1
ID: 35088385
Thank you, always good to bounce ideas off people.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question