| Author |
GPO problem in domain
|
|
| cm2gj 2002-01-25, 11:59 pm |
| I can't apply GPO's to user in the domains.... everything works ok... i test in several servers, demo domains and all works ok bur GPO's don't apply to users in the domain.
I need help!!! | |
| Psydefx 2002-01-26, 12:48 am |
| What objects are you creating the GPO on?
Permissions?
Step by step... | |
| cm2gj 2002-01-26, 12:56 am |
| 1- I install a windows 2000 server
2- I use dcpromo and promove to a domain controller
3- I install DHCP / WINS
4- I create a test Organizational Units named TEST
5- Inside test OU, i create some tests user accounts.
6- i test the logon process in several pcs, everythings works ok
7- i make a new gpo, and apply this gpo to the OU (hide screen icons, hide control panel, etc.... some visible things)
8- i login from any workstations and i can log in in the domain, but the gpo don`t apply......
i test the same things in several servers, in several demos....
another MCSEīs friends try the same and GPO donīt apply to the domain!!!!!!!
I test with terminal server and the GPO works ok
i test with interactive logon and i login locally in the server and the GPO are applied ok without problems.
the problems is IN APPLY THE GPO TO USERS WHEN HE LOGIN THE DOMAIN...
iīm search in everywhere and i donīt find any solution for this....
i appreciate your help!!!
thanks!!!!! | |
| Psydefx 2002-01-26, 1:08 am |
| Are the restrictions user restrictions or computer restrictions within the GPO?
Are you logging onto the domain or to the local machine?
Are you using the test accounts to log in?
Is there a local policy that is set that is different? | |
|
| THANKS FOR YOUR RESPONSE!!!
I RESPOND BETWEEN LINES
]Are the restrictions user restrictions or computer restrictions within the GPO?
USER RESTRICTIONS
Are you logging onto the domain or to the local machine?
I LOGIN FROM ANY WKSTATION WITH ANY USER ACCOUNTS THAT ARE MEMBER OF THE TEST OU WITH THE GPO. GPO DONīT APLLY.
WHEN I LOG IN IN THE SAME SERVER INTERACTIVELY WITH THE SAME ACCOUNT, GPO ARE APPLIED WITHOUT PROBLEMS.
Are you using the test accounts to log in?
I CREATE SEVERAL TEST ACCOUNTS. I NEVER SEE THE GPO WORKING WHEN I LOGIN FROM ANOTHER COMPUTER TO THE DOMAIN. ALL COMPUTERS ARE WINDOWS 2000 AND Windows XP PRO. EVERYTHING WORKS OK, BUT GPO NO!
Is there a local policy that is set that is different? [/B][/QUOTE]
I DON`T UNDERSTAND THIS.... | |
| Psydefx 2002-01-26, 2:00 am |
| Local policy is found in computer management and is the object that controls the local machine. It is generally applied before the OU, therefor overwritten, but special circumstances can change that.
What are the security settings on the OU?
(need read and apply checked "grant")
Are the USERS in the OU or in the USERS?
Do the workstations have domain computer accounts?
Are there settings within the computer GPO that conflict with the settings that you chose in the USER GPO section? | |
|
| Dear Psydefx....
Thanks for your incredible help.
I print your post now and tomorrow i go to test some things here in my home.
I have 2k adv server here and one laptop as a win2k domain client to make all test and check all this stuffs that you post me....
I respond you tomorrow!!!
Thanks!!!! |
|
|
|