Group policy issue

Discussion in 'Server Networking' started by Daniel, Aug 16, 2007.

  1. Daniel

    Daniel Guest

    How can i ensure that my domain client all have applied the same group
    policy setting from the server ? Thanks

    Daniel
     
    Daniel, Aug 16, 2007
    #1
    1. Advertisements

  2. hello,

    by default, gpo are applied (again) every 90 minutes.
    You may use gpresult from different point to ensure this.
    You may also search for GPO error on workstation when applying GPO

    Common GPO errors are covered here:
    Applying Group Policy causes Userenv errors and events to occur on your
    computers that are running Windows Server 2003, Windows XP, or Windows 2000
    http://support.microsoft.com/?scid=kb;en-us;887303&x=15&y=8

    If you think GPO are not applied, you can turn on debug mode:
    How to enable user environment debug logging in retail builds of Windows
    http://support.microsoft.com/?scid=kb;en-us;221833&x=7&y=6
     
    Mathieu CHATEAU, Aug 16, 2007
    #2
    1. Advertisements

  3. Daniel

    Daniel Guest

    Hi, below is my gpresult. What does it mean GPOs were not applied because
    they were filtered out but also listed in applied group policy objects ?


    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy
    WSUS
    Local Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Exchange policy
    Filtering: Not Applied (Empty)

    USER SETTINGS
    --------------
    CN=Daniel Tan,OU=MIS,DC=dist,DC=dyndns,DC=org
    Last time Group Policy was applied: 8/16/2007 at 3:41:04 PM
    Group Policy was applied from: OPTIMUS.dist.dyndns.org
    Group Policy slow link threshold: 500 kbps

    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy
    Exchange policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    WSUS
    Filtering: Not Applied (Empty)

    Local Group Policy
    Filtering: Not Applied (Empty)

    Daniel
     
    Daniel, Aug 16, 2007
    #3
  4. hi,
    it seems you have linked a GPO with computers settings on a OU where the
    users are and not that computer. thats why it listed on GPO list and isnt
    applied.
     
    Dragos CAMARA, Aug 17, 2007
    #4
  5. Daniel

    Daniel Guest

    Does this mean that the GPO is applied and is this correct ? I link the GPO
    to the root domain.

    Daniel
     
    Daniel, Aug 17, 2007
    #5
  6. well in your case if the WSUS and the Exchange policy are applied to the
    domain, yes are applied.
    The WSUS policy - if i assume correct from the name are settings for windows
    update - are settings are for computer so will never be appiled to users so
    you will see on unapplied GPO list, but is applied on computers and you see
    it on applied GPO list on computer section on gpresult, the same with
    Exchange policy wich i assume are settings for users not for computers.
     
    Dragos CAMARA, Aug 17, 2007
    #6
  7. Daniel

    Daniel Guest

    Dragos, what do you mean for users and not for computers ?

    Daniel
     
    Daniel, Aug 17, 2007
    #7
  8. Daniel

    Bill Grant Guest

    Exctly what he said. Some group policies apply to machines and some apply
    to users. Software update policies apply to machines, so they will not be
    applied to users!
     
    Bill Grant, Aug 17, 2007
    #8
  9. Daniel

    Daniel Guest

    How to determine which type of updates are applied to user or machines ?

    Daniel
     
    Daniel, Aug 17, 2007
    #9
  10. Daniel

    Bill Grant Guest

    We would all like to be able to update our users from WSUS, but
    unfortunately they are people, not computers. You have to use old-fashioned
    methods like seminars, handouts and even talking to them to get the message
    through.
     
    Bill Grant, Aug 18, 2007
    #10
  11. Daniel

    Daniel Guest

    Do you mean that WSUS update using machine is correct and depends on our
    choice which type of group policy we select.

    Daniel
     
    Daniel, Aug 18, 2007
    #11
  12. Daniel

    Radtherapy Guest

    What about a software update policy that is applied to the computer OU, says
    that it has been applied, but still does not work?

    I have been trying to apply an msi for RSClientPrint that gpresult says has
    applied, but I continue to not be able to download reports from the site that
    is requiring it.

    I had created a transform file for it and tried to deploy with and without
    it - if I run it without the transform, it never asks for interaction (which
    it should).

    The site that has started requiring this control serves an important
    function for my clinics - and this needs to be applied before next week.

    Any help is appreciated!
     
    Radtherapy, Sep 28, 2007
    #12
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.