+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows Thread, AD Mystery in Technical; I'm playing about with a new GPO - one setting is to disable access to properties to 'My Computer' and ...
  1. #1
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    AD Mystery

    I'm playing about with a new GPO - one setting is to disable access to properties to 'My Computer' and 'My Network Places'.

    The problem is I can't seem to disable it so access is granted.

    I have changed the settings in User Configuration - Administratice Templates - Desktop and forced gpupdate on the server and client but the test user still cannot access properties on either.

    Another quirk that seems to happen is the error message warning that the function has been disabled appears twice.

    I know it's Monday but can anyone see what I'm missing?

  2. #2

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,539
    Thank Post
    830
    Thanked 609 Times in 412 Posts
    Rep Power
    432

    Re: AD Mystery

    try running gpupdate /sync on the client PC and rebooting...

  3. #3
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    Re: AD Mystery

    Thanks Gatt - tried it but no change.

  4. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,965
    Thank Post
    587
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397

    Re: AD Mystery

    If this is a win2k3 domain have you run the modelling wizard to see what is applied?

    Ben

  5. #5
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    Re: AD Mystery

    Thanks Plexer - ran it and guess what? It's not being applied by either my test GPO or the Domain GPO.

    Any more ideas?

    Anyone?

    Please?

    Going insane here!! :?

  6. #6

    Join Date
    Jun 2005
    Posts
    223
    Thank Post
    6
    Thanked 8 Times in 8 Posts
    Rep Power
    29

    Re: AD Mystery

    Check the other GPO settings, you can also disable access to these properties dialogs in the Admin Templates-Control Panel bit.

  7. #7

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,965
    Thank Post
    587
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397

    Re: AD Mystery

    what about checking the settings to enforce the gpo? just to see if that makes it work.

    Otherwise check what other gpo's are being applied and what the settings are don't forgot the order that they are applied in makes a difference.

    Ben

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: AD Mystery

    And check the security and WMI filtering.

  9. #9
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    Re: AD Mystery

    I've checked all other GPOs linked or not and all have the feature 'not configured'.

    Enforced it too - still no change.

    Tried it on different PCs with different users including creating a new user in the container - still nothing.

    Thanks for your input so far guys - going to sleep on it and see what happens tomorrow.

  10. #10

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,539
    Thank Post
    830
    Thanked 609 Times in 412 Posts
    Rep Power
    432

    Re: AD Mystery

    Check the security settings of your GPO's and make sure the "Apply Policy" checkbox is ticked (last option IIRC) for all the users this is likely to affect (eg. Domain Users, but not Domain Admins, etc)

  11. #11

    Join Date
    Jul 2005
    Location
    Corby
    Posts
    1,056
    Thank Post
    12
    Thanked 20 Times in 18 Posts
    Rep Power
    23

    Re: AD Mystery

    Failing all that look on www.gpanswers.com - they have been great when I have gotten stuck on a particular Group Policy thingy...

  12. #12

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,965
    Thank Post
    587
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397

    Re: AD Mystery

    If this is a multi domain controller setup are you sure dns, replication etc... is all working ok?

    Ben

  13. #13
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    Re: AD Mystery

    Thanks again guys but still no luck.

    I can make changes to any other part of the policy and will do as requested with no bother.

    The message that comes up when my test user tries to open Properties in the My Computer icon is

    "This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator"

    Great!! The policy worked - only now it's disabled and the above message still appears.

    One odd thing I have noticed is that the Properties option is available for selection whether the policy is enabled or disabled.

    No other Policy has this option configured, I've linked, enforced, linked and enforced to no avail.

    I have gone through every setting in every GPO on the system and I can't find anywhere else that this setting is enabled or disabled.

    It's not the computer as I've tried several.

    DNS, replication etc are all working fine.

    I'm going to give it till the end of today to find a solution afterwhich I'm going to scrap the GPO and start again from scratch and put it down to an unknown glitch.

    Thanks for you input guys.

  14. #14

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,965
    Thank Post
    587
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397

    Re: AD Mystery

    Ok what are the clients XP or 2K? if XP what style of desktop do they have classic or telletubies? just wondering if anything there could cause a problem.

    Ben

  15. #15
    alan-d's Avatar
    Join Date
    Aug 2005
    Location
    Sutton Coldfield
    Posts
    2,400
    Thank Post
    353
    Thanked 254 Times in 185 Posts
    Rep Power
    74

    Re: AD Mystery

    lol - I think I'm turning into a Teletubby

    Server 2003 and Win XP SP2.

    It's definately something to do with that particular GPO - I just replace it with a new one - changed the one setting, updated and logged in as the test user - it worked fine.

    Looks like it' back to step one

    Wibble!!!!!

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Mystery Diagnosis
    By bambroso in forum Windows
    Replies: 12
    Last Post: 2nd December 2007, 11:36 PM
  2. Keyboard mystery
    By pinemarten in forum General Chat
    Replies: 3
    Last Post: 15th March 2007, 11:51 PM
  3. Screen of Mystery
    By acb_ in forum Windows
    Replies: 10
    Last Post: 1st December 2006, 11:50 PM
  4. AOL mystery doing my brain in.
    By Jake in forum How do you do....it?
    Replies: 4
    Last Post: 24th January 2006, 01:20 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •