Solved

unlinked GPO still active

Posted on 2011-03-11
8
1,519 Views
Last Modified: 2012-05-11
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.

I have a 2003 domain. have 2 domain controllers and 1 08 file server.

gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.

however the GPOs are still applying.
any help greatly appreciate
0
Comment
Question by:sbalk23
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114012
Hi sbalk23.
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?
0
 

Author Comment

by:sbalk23
ID: 35114026
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP

things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114048
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
0
 

Author Comment

by:sbalk23
ID: 35114201
                                                                   
                                                                     
                                                                     
                                             

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/11/2011 at 8:41:31 PM



RSOP results for SHS\sbalk on COMP228 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 SHS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\sbalk
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=COMP228,CN=Computers,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
    Group Policy was applied from:      sdc2.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All
        Firewall

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        COMP228$
        Domain Computers
       

USER SETTINGS
--------------
    CN=sbalk,OU=TestingOU,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
    Group Policy was applied from:      sdc1.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Firewall
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
       
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 3

Accepted Solution

by:
thomasd04 earned 500 total points
ID: 35114217
I see the three GPOs that have been unlinked. But there are two GPOs still being applied? So are you having a problem with these two or are the settings coming from the three that are not applied?
0
 

Author Comment

by:sbalk23
ID: 35114276
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.  
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114295
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
0
 

Author Comment

by:sbalk23
ID: 35144056
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
implementing group policy without server reboot 9 61
exchange, windows server 6 57
Trust one-way issue 2 52
Auto-Enrollment Group Policy 2 43
The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now