Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

unlinked GPO still active

Posted on 2011-03-11
8
Medium Priority
?
1,635 Views
Last Modified: 2012-05-11
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.

I have a 2003 domain. have 2 domain controllers and 1 08 file server.

gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.

however the GPOs are still applying.
any help greatly appreciate
0
Comment
Question by:sbalk23
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114012
Hi sbalk23.
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?
0
 

Author Comment

by:sbalk23
ID: 35114026
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP

things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114048
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
0
Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

 

Author Comment

by:sbalk23
ID: 35114201
                                                                   
                                                                     
                                                                     
                                             

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/11/2011 at 8:41:31 PM



RSOP results for SHS\sbalk on COMP228 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 SHS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\sbalk
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=COMP228,CN=Computers,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
    Group Policy was applied from:      sdc2.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All
        Firewall

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        COMP228$
        Domain Computers
       

USER SETTINGS
--------------
    CN=sbalk,OU=TestingOU,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
    Group Policy was applied from:      sdc1.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Firewall
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
       
0
 
LVL 3

Accepted Solution

by:
thomasd04 earned 2000 total points
ID: 35114217
I see the three GPOs that have been unlinked. But there are two GPOs still being applied? So are you having a problem with these two or are the settings coming from the three that are not applied?
0
 

Author Comment

by:sbalk23
ID: 35114276
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.  
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114295
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
0
 

Author Comment

by:sbalk23
ID: 35144056
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question