Solved

unlinked GPO still active

Posted on 2011-03-11
8
1,581 Views
Last Modified: 2012-05-11
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.

I have a 2003 domain. have 2 domain controllers and 1 08 file server.

gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.

however the GPOs are still applying.
any help greatly appreciate
0
Comment
Question by:sbalk23
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114012
Hi sbalk23.
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?
0
 

Author Comment

by:sbalk23
ID: 35114026
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP

things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114048
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:sbalk23
ID: 35114201
                                                                   
                                                                     
                                                                     
                                             

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/11/2011 at 8:41:31 PM



RSOP results for SHS\sbalk on COMP228 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 SHS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\sbalk
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=COMP228,CN=Computers,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
    Group Policy was applied from:      sdc2.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All
        Firewall

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        COMP228$
        Domain Computers
       

USER SETTINGS
--------------
    CN=sbalk,OU=TestingOU,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
    Group Policy was applied from:      sdc1.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Firewall
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
       
0
 
LVL 3

Accepted Solution

by:
thomasd04 earned 500 total points
ID: 35114217
I see the three GPOs that have been unlinked. But there are two GPOs still being applied? So are you having a problem with these two or are the settings coming from the three that are not applied?
0
 

Author Comment

by:sbalk23
ID: 35114276
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.  
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114295
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
0
 

Author Comment

by:sbalk23
ID: 35144056
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question