Group Policy -> Missing Group Policy settings

Discussion in 'Active Directory' started by Jeroen, Jul 24, 2007.

  1. Jeroen

    Jeroen Guest

    have the following problem with group policy:

    On a Windows 2003 domaincontroller I have the following group policy:

    Default Domain Policy, with the following settings:

    Permit Acces to the control panel , Enabled
    Hide all items on desktop, Enabled

    Administrator Policy with the following settings:

    Permit Acces to the control panel , Disabled
    Delete the run item from the control panel, Disabled

    So the adminstrators has access to the control panel, and the users don't

    If I use the Group Policy Management tool from Microsoft, for simulating the
    GPO's is receive the following results:

    For the user on a XP machine:

    I see the GPO Default Domain Policy is Apllied, and the Administrator policy
    is denied, so this is OK.
    When I look at the settings, I see the settings for desktop and control
    panel are enabled, so there not visible, this seems to be OK.

    But now the administrator on a XP machine.

    I see now both domain and admin policies are enabled.
    When I go to the settings results, I see the following.

    permit acces to control panel, disabled , winning GPO Admin policy.

    This is OK, but now here is the problem, I don't see the other policy of the
    desktop items, wheiter it is disabled or enabled, it just doesn't show up!

    Please help
     
    Jeroen, Jul 24, 2007
    #1
    1. Advertisements

  2. Jeroen

    Jorge Silva Guest

    Hi
    check if you need to upgrade your ADM files.
    http://www.microsoft.com/downloads/...4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en

    Also note: You only need to have the templates installed on the machine
    where you administer your Group Policies, the *.inf files are just templates
    from which a .POL-file gets created, filled with all Group Policy settings
    you made. This .pol file resides within the SYSVOL folder and gets
    replicated between the domain controllers, anyway.
    Install the templates on the Group Policy Management machines, that is
    sufficient.

    --
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services
     
    Jorge Silva, Jul 24, 2007
    #2
    1. Advertisements

  3. Jeroen

    Jeroen Guest

    I've checked my ADM files, it seems to be OK, thanks.

    What I just noticed:

    In the sysvol directories I find the policies. I've also noticed a directory
    that is missing the ADM folder. It seems to be the Default Domain policy!

    Could it be this is causing the problem?
     
    Jeroen, Jul 24, 2007
    #3
  4. Jeroen

    Jorge Silva Guest

    the default domain policy is under sysvol\domain\policies\{gpoguid}
    if it's missing you can recreate it with the Dcgpofix

    --
    I hope that the information above helps you.
    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services
     
    Jorge Silva, Jul 24, 2007
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.