jmichaelpalermo4
asked on
Reset Group Policy to vanilla template
We have a number of group policies in place. However, after doing a bit of reconciling and clean up I found some inconsistencies with the end users. some of the new users are getting different results from the older (Pre-cleanup) users. There are many like the example below.
An example: If I had a policy that was applied that was set to "Enable", then my new policy was set for "Not configured". The result would be users that had the "Enable" applied before is therefor still enabled, because in order to remove it, the policy would have to be disabled.
Any suggestions, it there a way to default all policies and push them out to the users and computers then re-link the GP's that we want to use or an I way off with my thinking.
Thank you
An example: If I had a policy that was applied that was set to "Enable", then my new policy was set for "Not configured". The result would be users that had the "Enable" applied before is therefor still enabled, because in order to remove it, the policy would have to be disabled.
Any suggestions, it there a way to default all policies and push them out to the users and computers then re-link the GP's that we want to use or an I way off with my thinking.
Thank you
Hendrik Wiese
You can delete the old policies and just right click on the preferred policies and click on enforce, to enforce the policies you want.
ASKER
Okay, so I have removed all the old policies. Just to be clear. I would simply select enforce on each policy and thats it? Do I leave them enforced? Also why would I not want to have them enforced? Why is that not default for GP?
Thank you
Thank you
Yes. You would use the enforce to have all policies on your client machines to be the same (as you stated they don't currently all have the same ones) after that has been done then you can remove the enforce.
The reason it is not enforced by default is simply because if you were to have a policy applied to your top domain, but for some reason wanted another OU to have different settings. This is where you would use the enforce, to ensure that the settings on the objects within the OU get updated accordingly.
Hope this makes sense.
Cheers!!!
The reason it is not enforced by default is simply because if you were to have a policy applied to your top domain, but for some reason wanted another OU to have different settings. This is where you would use the enforce, to ensure that the settings on the objects within the OU get updated accordingly.
Hope this makes sense.
Cheers!!!
ASKER
Perfect, Thank you. So if I enforce all GP's in every OU at the same time, this will be okay. I just want to be clear. I want to choose to enforce every GP in every OU that may have mixed results, yes?
Thank you
Thank you
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
You Rock, thank you for the lesson
Hahahaha...No Problem, glad I could help.
Cheers!!! :)
Cheers!!! :)