?
Solved

GP not updating

Posted on 2014-10-07
3
Medium Priority
?
102 Views
Last Modified: 2014-10-20
I have two computers in an office.  User A is on computer A and user B is dedicated to computer B.

I had locked the users out of being able to write to CDs and other removable drives, and now I need to unlock.  I changed the policy and ran GPUpdate (even tried /force) on each station and I'm unable to get the policy to update for these users.

Create a new profile on each computer that isn't that user and I get the permissions I'm looking for.

Log User B into computer A for the first time ever (and visa versa) and they get the permissions sent to them correctly.

So I see that the permissions are correct, but for some reason, each user can't have their permissions updated on their workstations.

I've tried removing the user via logging in as an administrator on their workstation and killing the profile in the User Profiles tool, then removing their home directories.  And while the user did propagate back on the workstation, they still have the bum permissions.

How can I force a flush and reset of these permissions?

The server is 2012 and the workstations are 7.
0
Comment
Question by:Azra Lyndsey
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 82

Expert Comment

by:David Johnson, CD, MVP
ID: 40367620
Create an OU -- i.e. Allow Removable devices
create another (yes yet another) gpo that has the settings set to either not configured  or to allow and then link this gpo to that OU
0
 
LVL 1

Accepted Solution

by:
Azra Lyndsey earned 0 total points
ID: 40382472
I tried this but was unable to get the GPO to take.  I ended up creating a new user for this user and that did the trick.  Cheating, I know, but I needed to get this resolved.
0
 
LVL 1

Author Closing Comment

by:Azra Lyndsey
ID: 40391525
Would have rather found a fix than perform a work around, but I had to get this done.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question