Solved

GP not updating

Posted on 2014-10-07
3
101 Views
Last Modified: 2014-10-20
I have two computers in an office.  User A is on computer A and user B is dedicated to computer B.

I had locked the users out of being able to write to CDs and other removable drives, and now I need to unlock.  I changed the policy and ran GPUpdate (even tried /force) on each station and I'm unable to get the policy to update for these users.

Create a new profile on each computer that isn't that user and I get the permissions I'm looking for.

Log User B into computer A for the first time ever (and visa versa) and they get the permissions sent to them correctly.

So I see that the permissions are correct, but for some reason, each user can't have their permissions updated on their workstations.

I've tried removing the user via logging in as an administrator on their workstation and killing the profile in the User Profiles tool, then removing their home directories.  And while the user did propagate back on the workstation, they still have the bum permissions.

How can I force a flush and reset of these permissions?

The server is 2012 and the workstations are 7.
0
Comment
Question by:Azra Lyndsey
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 40367620
Create an OU -- i.e. Allow Removable devices
create another (yes yet another) gpo that has the settings set to either not configured  or to allow and then link this gpo to that OU
0
 
LVL 1

Accepted Solution

by:
Azra Lyndsey earned 0 total points
ID: 40382472
I tried this but was unable to get the GPO to take.  I ended up creating a new user for this user and that did the trick.  Cheating, I know, but I needed to get this resolved.
0
 
LVL 1

Author Closing Comment

by:Azra Lyndsey
ID: 40391525
Would have rather found a fix than perform a work around, but I had to get this done.
0

Featured Post

Turn Insights Into Action

You’ve already invested in ITSM tools, chat applications, automation utilities, and more. Fortify these solutions with intelligent communications so you can drive business processes forward.

With xMatters, you'll never miss a beat.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question