+ Post New Thread
Results 1 to 14 of 14
Windows Server 2000/2003 Thread, New users not getting GP assigned Start Menu in Technical; It's a bit of a weird one really. I have six identical ICT suites all of which untill recently shared ...
  1. #1
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0

    New users not getting GP assigned Start Menu

    It's a bit of a weird one really.

    I have six identical ICT suites all of which untill recently shared a common Start menu located on share from a 2K3 R2 server... It worked perfectly for many years.

    Then (for reasons beyond my control) I had to setup seperate menus for each room, again same method of applying and sharing the menus and this worked too...

    Simples!

    Or so I thought. Exisiting student users can see the menus but new students can't, I've checked the obvious like share permissions, they're members of the correct security groups etc.

    Any ideas what could make this happen?

    Cheers.

  2. #2

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,806
    Thank Post
    215
    Thanked 266 Times in 216 Posts
    Rep Power
    68
    OK just to help me out, your using a user level GPO to remap the desktop and start menus to a folder share on a 2k3 server. how are you then targeting those users in the different (I assume) computer OUs?

  3. #3
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Correctamundo, for each room there's an OU containing the relevant computers, each OU has its own GPO to remap the Start menu.

    Thanks

  4. #4

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,806
    Thank Post
    215
    Thanked 266 Times in 216 Posts
    Rep Power
    68
    sure but unless the users are in the same OU as the computers it won't apply.

    I'm certain you cant apply a user gpo to an OU that contains only your computers and expect it to apply the user portion (of the GPO) to users who log onto them.

    Unless both your users and computers are in that OU the policy won't have the desired affect.

  5. #5
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    I've had the same setup for about 6 (ish... my mind is going!) years and it's worked faultlessly, obviously adding new many new users along the way.

    Here's a very cut down version of how looked before the changes, please excuse the crap diagram:

    curriculum.school.local
    |
    | --> Curriculum
    | *Startmenu_remap_GPO_here*
    | |
    | | --> Students
    | | |
    | | | --> 2005
    | | | --> 2006
    | | | --> 2007
    | |
    | | --> Worksations
    | | |
    | | | --> Room1
    | | | --> Room2
    | | | --> Room3





    Here's the new setup, which has worked for around 3 months now:




    curriculum.school.local
    |
    | --> Curriculum
    | |
    | | --> Students
    | | |
    | | | --> 2005
    | | | --> 2006
    | | | --> 2007
    | |
    | | --> Worksations
    | | |
    | | | --> Room1
    | | | Startmenu_remap_for_room1
    | | |
    | | | --> Room2
    | | | Startmenu_remap_for_room2
    | | |
    | | | --> Room3
    | | | Startmenu_remap_for_room3


    Hope that clarifies the layout.


    Thanks

  6. #6
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    72
    Thanked 90 Times in 75 Posts
    Rep Power
    62
    as stated by chazzy2501, you seem to be applying user gp to a computer ou.

    previously your gp was being inherited down to the users ou, now the users are above and cannot see it.

    BoX

  7. #7

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,107
    Thank Post
    217
    Thanked 1,310 Times in 806 Posts
    Blog Entries
    4
    Rep Power
    516
    applying a user policy to a computer OU is perfectly acceptable - you just need to enable loopback processing

    Loopback processing of Group Policy

    I don't suppose the new users are missing this?

  8. Thanks to Domino from:

    chazzy2501 (2nd March 2010)

  9. #8
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    @box_l

    I understand what was said previously, but it doesn't explain why existing users have no issues seeing the new Start menus and why new users can't.

    But thanks for the input.


    @domino

    Thanks, going to give it a shot now.
    Last edited by Blackadder; 2nd March 2010 at 02:01 PM.

  10. #9

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,806
    Thank Post
    215
    Thanked 266 Times in 216 Posts
    Rep Power
    68
    Heh! I never knew that was possible. This should allow for some nice tweaks to my own gpo now.

  11. #10
    box_l's Avatar
    Join Date
    May 2007
    Location
    Herefordshire
    Posts
    429
    Thank Post
    72
    Thanked 90 Times in 75 Posts
    Rep Power
    62
    @domino

    agreed, but it did'nt look like that was happening before.

    BoX

  12. #11
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hmmm... The plot thickens!

    Tried Domino's solution but sadly to avail.

    Looks like there may be some kind of security issue because during logoff a message flashes up about insufficient rights to access their roaming profile which I never spotted before, but, again the new users are all members of the same security groups as the existing users.

    Anyway I gave a user full control permission (including sub files/folders) over their roaming profile, but still the access denied error appears (profile path is correct). Yet they can still access folders that are only available to certain security groups on network shares.

  13. #12

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,107
    Thank Post
    217
    Thanked 1,310 Times in 806 Posts
    Blog Entries
    4
    Rep Power
    516
    Have they got security rights over the GPO? and does the domain machines group too?

  14. #13
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Thanks for the swift reply, checked the GPO rights and all authenticated have users access and by default machines aren't specified in the permissions list.

  15. #14
    Blackadder's Avatar
    Join Date
    Jan 2009
    Location
    London
    Posts
    24
    Thank Post
    1
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Looks like the problem is much more deep rooted then GP I'll start a new thread as my grey hairs are going white with stress.

    Thank you everyone for your help.

SHARE:
+ Post New Thread

Similar Threads

  1. Start menu search
    By andy_nic in forum Windows Vista
    Replies: 1
    Last Post: 15th February 2010, 03:10 PM
  2. prevent users from deleting start menu items
    By techie211 in forum Windows Server 2000/2003
    Replies: 10
    Last Post: 1st September 2009, 03:58 PM
  3. [XP] All Users start menu / desktop
    By Psymon in forum Windows
    Replies: 4
    Last Post: 28th April 2009, 02:31 PM
  4. Replies: 2
    Last Post: 11th September 2008, 02:03 PM
  5. Adding shortcuts to ALL USERS start menu
    By contink in forum Wireless Networks
    Replies: 15
    Last Post: 16th October 2006, 10:17 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •