+ Post New Thread
Results 1 to 6 of 6
Network and Classroom Management Thread, CC3 GPOs still coming across? in Technical; This post is linked to the one regarding the move from CC3 to a vanilla one, but i felt this ...
  1. #1

    Join Date
    Nov 2006
    Location
    Derbyshire
    Posts
    101
    Thank Post
    16
    Thanked 5 Times in 4 Posts
    Blog Entries
    1
    Rep Power
    16

    CC3 GPOs still coming across?

    This post is linked to the one regarding the move from CC3 to a vanilla one, but i felt this warranted a separate thread as its a specific request for help!

    To summarise from the start, we are looking to migrate from a CC3 network to a vanilla one but its going to be a gradual process, rather than my desired "lets pull the pug and start from scratch!"

    Therefore, we have created a room of vanilla clients, and have created OUs / GPOs outside of the RM CC3 active directory structure. Have set the GPOs to use loopback processing with replace to stop RM GPOs from applying to the clients (as informed by Jose and Piqueaboo in aforementioned thread)

    The thing is, we are still experiencing certain "non-vanilla" settings - for example Synchronise runs upon the user logging out..this is definitely disabled in the GPO

    Interestingly if we create a completely new user using the standard Windows 2003 ADUC everything works fine...UNTIL...a user created using the RM management console logs on. This seems to "pull across" RM settings to the XP machine which then also apply to the "vanilla" user eg\synchronisation occurs, icons disappear

    In effect the machine kind of becomes an RM client

    Does this sound familiar to anyone? Any advice?

  2. #2

    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,168
    Thank Post
    98
    Thanked 319 Times in 261 Posts
    Blog Entries
    4
    Rep Power
    113
    Is CC3 setting machine policies in GPOs applied to the users, then enforcing them?

    That's what it sounds like to me at least, particularly if your clean users work fine on the machines, then the RM ones pull down GPs.

  3. #3


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,690
    Thank Post
    352
    Thanked 796 Times in 715 Posts
    Rep Power
    347
    I can confirm that we have RM Users using Vanilla machines with no problems through this kind of policy blocking etc.

    I'm not sure why this is happening to you though=/

  4. #4

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    You could always block policy inheritance (on your new OU) until the whole of your network is moved over to a vanilla setup.

    However, I suspect it may have something to do with the location of your user objects and computer objects, which is why (realistically) it would be easier to just start again. Alternatively you could setup a second domain, but of course you'd require another server.

  5. #5

    Join Date
    Oct 2005
    Location
    Bangkok
    Posts
    235
    Thank Post
    15
    Thanked 32 Times in 23 Posts
    Rep Power
    24
    what you have to remember is that your user accounts probably have to logon to both cc3 and vanilla so your probably better off trying to solve issues by using computer /machine policies otherwise you could get in a sticky mess.

    Have a policy on the ou that contains the vanilla clients and do the following.
    disable roaming profiles, force local profiles only.
    force "wait for the network" option, this will ensure your new policies get through.

    disable offline files options on vanilla machines by
    computer configuration/administrative templates/network/offline files
    disable several options in there.

  6. Thanks to Jose from:

    cheesypete (20th January 2009)

  7. #6

    Join Date
    Nov 2006
    Location
    Derbyshire
    Posts
    101
    Thank Post
    16
    Thanked 5 Times in 4 Posts
    Blog Entries
    1
    Rep Power
    16
    Thanks for the replies everyone - have just sat down at my desk and seen the responses

    Just to confirm the current settings
    [LIST][*]Vanilla OU has inheritance blocked and doesnt apply the Default Domain Policy (not that that does much anyway)[*]The GPO has been set to user loopback processing (replace) so that only computer policies are applied

    Jose - appreciate the last response, thats something i havent looked at

    The second domain aspect is something i have literally just discussed with my ICT techs.

    Will have another crack at this tomorrow

SHARE:
+ Post New Thread

Similar Threads

  1. Laptops with GPOs off the network?
    By gshaw in forum Windows
    Replies: 3
    Last Post: 29th October 2008, 11:32 AM
  2. Getting started with GPOs
    By laserblazer in forum Wireless Networks
    Replies: 1
    Last Post: 30th June 2008, 10:09 AM
  3. GPOs and managing computers
    By sparkeh in forum Wireless Networks
    Replies: 7
    Last Post: 18th July 2007, 09:47 AM
  4. Copying GPOs...How?
    By HodgeHi in forum Windows
    Replies: 4
    Last Post: 24th November 2006, 11:10 AM
  5. GPOs with everything
    By ITWombat in forum Windows
    Replies: 13
    Last Post: 3rd July 2006, 03:03 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •