Solved

unlinked GPO still active

Posted on 2011-03-11
8
1,504 Views
Last Modified: 2012-05-11
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.

I have a 2003 domain. have 2 domain controllers and 1 08 file server.

gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.

however the GPOs are still applying.
any help greatly appreciate
0
Comment
Question by:sbalk23
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114012
Hi sbalk23.
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?
0
 

Author Comment

by:sbalk23
ID: 35114026
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP

things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114048
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
0
 

Author Comment

by:sbalk23
ID: 35114201
                                                                   
                                                                     
                                                                     
                                             

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/11/2011 at 8:41:31 PM



RSOP results for SHS\sbalk on COMP228 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 SHS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\sbalk
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=COMP228,CN=Computers,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
    Group Policy was applied from:      sdc2.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All
        Firewall

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        COMP228$
        Domain Computers
       

USER SETTINGS
--------------
    CN=sbalk,OU=TestingOU,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
    Group Policy was applied from:      sdc1.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Firewall
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
       
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 3

Accepted Solution

by:
thomasd04 earned 500 total points
ID: 35114217
I see the three GPOs that have been unlinked. But there are two GPOs still being applied? So are you having a problem with these two or are the settings coming from the three that are not applied?
0
 

Author Comment

by:sbalk23
ID: 35114276
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.  
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114295
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
0
 

Author Comment

by:sbalk23
ID: 35144056
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now