Solved

unlinked GPO still active

Posted on 2011-03-11
8
1,609 Views
Last Modified: 2012-05-11
ok. i am tired from working on this network so i apologize in advance for any "non exact" terms.

I have a 2003 domain. have 2 domain controllers and 1 08 file server.

gpmc is on 2003. there are some GPO linked to certain OUs but i have disabled all OUs and Unlinked them all.

however the GPOs are still applying.
any help greatly appreciate
0
Comment
Question by:sbalk23
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114012
Hi sbalk23.
What kind of settings are being persistent? Are they User settings? If so some of them will be cached with the users profile until a restart is done or the domain refreshes the GPO push.
I assume they are not preferences, right?
How many DC's do you have? Just want to make sure you're not having replication issues with the GPO's.
Lastly, have you run RSoP or GPUPDATE on the target workstations to verify GPO's are indeed still being applied?
0
 

Author Comment

by:sbalk23
ID: 35114026
i have ran gpupdate /force.
also restarted
i dont believe they are being replicated
2 dc
it is a network i am working on that had a netware fileserver that crashed. hence not lots of upgrades have happened.
haven't done RSOP

things like my computer not in start menu. stuff like that.
lots of settings locked down.
it is a k-12 so that is fine for some students but not staff.
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114048
Please run gpresults and/or RSoP and post the relevant results. We want to verify which (if any) GPO's are actually being applied and which settings.
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 

Author Comment

by:sbalk23
ID: 35114201
                                                                   
                                                                     
                                                                     
                                             

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 3/11/2011 at 8:41:31 PM



RSOP results for SHS\sbalk on COMP228 : Logging Mode
-----------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 SHS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:            
Local Profile:               C:\Documents and Settings\sbalk
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=COMP228,CN=Computers,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:25:17 PM
    Group Policy was applied from:      sdc2.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All
        Firewall

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        COMP228$
        Domain Computers
       

USER SETTINGS
--------------
    CN=sbalk,OU=TestingOU,DC=SHS,DC=Local
    Last time Group Policy was applied: 3/11/2011 at 8:26:38 PM
    Group Policy was applied from:      sdc1.SHS.Local
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        IE - All

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Firewall
            Filtering:  Not Applied (Empty)

        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
       
0
 
LVL 3

Accepted Solution

by:
thomasd04 earned 500 total points
ID: 35114217
I see the three GPOs that have been unlinked. But there are two GPOs still being applied? So are you having a problem with these two or are the settings coming from the three that are not applied?
0
 

Author Comment

by:sbalk23
ID: 35114276
Neither.
The gpos that r happening r disabled. Do I need to make a Gpo that will put my computer back in start menu and allowing access to my docs. That is just a couple of them. I thought disabling them and unlinking them would make things go back to normal.  
0
 
LVL 3

Expert Comment

by:thomasd04
ID: 35114295
Please run RSoP from MMC on a target computer so we can see specific settings being applied. Did you create the restrictions or are you cleaning up someone else's work? Could there have been another tool or a logon script that is applying these settings to the registry? Can you manually make changes to one of the settings on the computer and have it stick or does it revert back?
0
 

Author Comment

by:sbalk23
ID: 35144056
i have corrected the issue i was having.
i just made a GPO with opposite effects.
worked.
thanks for the help
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
Learn about cloud computing and its benefits for small business owners.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

635 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question