unlinked GPO still active
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.
I have a 2003 domain. have 2 domain controllers and 1 08 file server.
gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.
however the GPOs are still applying.
any help greatly appreciate
I have a 2003 domain. have 2 domain controllers and 1 08 file server.
gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.
however the GPOs are still applying.
any help greatly appreciate
ASKER
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP
things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP
things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
ASKER
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 3/11/2011 at 8:41:31 PM
RSOP results for SHS\sbalk on COMP228 : Logging Mode
--------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: SHS
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\sbalk
Connected over a slow link?: No
COMPUTER SETTINGS
------------------
CN=COMP228,CN=Computers,DC
Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
Group Policy was applied from: sdc2.SHS.Local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
IE - All
Firewall
The following GPOs were not applied because they were filtered out
--------------------------
Default Domain Policy
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------
BUILTIN\Administrators
Everyone
Debugger Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
COMP228$
Domain Computers
USER SETTINGS
--------------
CN=sbalk,OU=TestingOU,DC=S
Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
Group Policy was applied from: sdc1.SHS.Local
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
--------------------------
IE - All
The following GPOs were not applied because they were filtered out
--------------------------
Firewall
Filtering: Not Applied (Empty)
Default Domain Policy
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
--------------------------
Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
ASKER
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
i just made a GPO with opposite effects.
worked.
thanks for the help
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?