Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 54
  • Last Modified:

Disabling GPO for specific server.

I did a couple of Window Updates, one of them being an update to SQL,  to a server last Thursday and now when I try opening the program on that server, I get a couple of Automation errors. When I talked to support from the program's company, they don't think it has anything to do with the updates but something with Group Policy. I restored our backup from Wednesday night, done before the updates were applied, and still get the error so I know it's not the updates. We haven't made any changes to GP lately but I was wondering if I could exclude this server from getting the GPO to see if that's what is causing it. The server is Server 2008 SP2.
0
itgolfer
Asked:
itgolfer
  • 4
  • 3
1 Solution
 
Joseph MoodyBlogger and wearer of all hats.Commented:
Sure. On the GPO - click delegation - advanced - Add - add your server name. Check the deny box that is next to Apply Group Policy. In most cases, you can simply run a gpupdate to remove that GPOs setting form the machine.
0
 
itgolferAuthor Commented:
Thanks. Is there an easy way to see what each machine is pulling in for GPO?
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
On the machine, run gpresult /h report.htm /f

Then open that report.htm file.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
itgolferAuthor Commented:
OK, it looks like it generated the report but where do I open it at?
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
just type report.htm in the command window. The report is saved in the operating directory that the command window points to (normally C:\Users\USERNAME\).
0
 
itgolferAuthor Commented:
Great, thanks. It appears that all of our GPOs from the domain controller are Access Denied (Security Filtering), which I'm assuming is a good sign. The program still isn't working but at least I can show their support that no GPOs are being applied.
0
 
Joseph MoodyBlogger and wearer of all hats.Commented:
Access Denied would show that the GPOs weren't being applied (which is good in this case). Be sure to remove that deny setting or future you will curse current you. :)
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now