+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 24
Windows Thread, GPO not applying in Technical; I have put in a Ctrl, Alt and Delete GPO so that users can see the Code of conduct before ...
  1. #1
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108

    GPO not applying

    I have put in a Ctrl, Alt and Delete GPO so that users can see the Code of conduct before logging in. This has applied to some managed PC's but not all. I have tried a GPupdate force, but still nothing. It says it has applied the policy, but it hasn't.

    Is there a local service that needs to be started. It seems as if the local policy is over-riding the network one.

  2. #2

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    Use GPMC (Group Policy Management Console) to run a GP Results report. This should tell you why the GPO hasn't applied. There will undoubtably be an error in the logs about it.

  3. #3
    dbsocs08's Avatar
    Join Date
    Nov 2008
    Location
    Oxford
    Posts
    12
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Same as Ric_, but also try running the RSOP snap-in on the machines that aren't working, at least then you'll be able to see what is being applied by GPO and then check the events to watch for errors.

  4. #4

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Quote Originally Posted by sippo View Post
    I have put in a Ctrl, Alt and Delete GPO so that users can see the Code of conduct before logging in. This has applied to some managed PC's but not all. I have tried a GPupdate force, but still nothing. It says it has applied the policy, but it hasn't.

    Is there a local service that needs to be started. It seems as if the local policy is over-riding the network one.
    It should work for every PC that is managed by the domain, as the domain policy takes priority over the local one. Obviously this entry should be disabled or 0 otherwise LegalNoticeCaption and LegalNoticeText will not work.

    Also try running rsop.msc on the PCs that fail to pick up the policy just after you are logged on the domain. That should tell you if the policy has been applied locally

  5. #5
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108
    Quote Originally Posted by Ric_ View Post
    Use GPMC (Group Policy Management Console) to run a GP Results report. This should tell you why the GPO hasn't applied. There will undoubtably be an error in the logs about it.
    How do I do this??

    Is it on the server or local client?

  6. #6

    Join Date
    Feb 2008
    Location
    Portsmouth
    Posts
    163
    Thank Post
    16
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Quote Originally Posted by sippo View Post
    How do I do this??

    Is it on the server or local client?
    It's on the server. I think this is what he means...

  7. #7
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108
    See I've done a gpresult on a client pc, it says it has been applied but you can clearly see it hasn't.

  8. #8
    Nick_Parker's Avatar
    Join Date
    Jan 2008
    Location
    Dainfern, South Africa
    Posts
    435
    Thank Post
    95
    Thanked 18 Times in 13 Posts
    Rep Power
    17
    Quote Originally Posted by sippo View Post
    I have put in a Ctrl, Alt and Delete GPO so that users can see the Code of conduct before logging in. This has applied to some managed PC's but not all. I have tried a GPupdate force, but still nothing. It says it has applied the policy, but it hasn't.

    Is there a local service that needs to be started. It seems as if the local policy is over-riding the network one.
    We had a problem with GP applying because we had a 2nd Domain Controller (as a backup) and it was somehow taking control, but didn't have the logon scripts available.

    Just out of interest, how are you doing the Code of Conduct??
    I'm looking for a way of doing it @ our college

  9. #9
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108
    Nick we have a 2nd domain controller aswell, but how did you realise 'it was taking over'?

    As for the code of conduct, its just something I wipped up. I'll see if I can dig out an electronic copy.

  10. #10
    dbsocs08's Avatar
    Join Date
    Nov 2008
    Location
    Oxford
    Posts
    12
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Have you created a new GPO or added it to an existing one?

  11. #11
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108
    At first I put in a existing one which didn't work, then I created a new one.

  12. #12
    dbsocs08's Avatar
    Join Date
    Nov 2008
    Location
    Oxford
    Posts
    12
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    OK mate, no worries, didn't wanna sound patronizing about checking that the new GPO is assigned to all machines, created under a stations OU?

  13. #13
    sippo's Avatar
    Join Date
    May 2008
    Location
    Swindon, Wiltshire
    Posts
    1,702
    Thank Post
    132
    Thanked 179 Times in 130 Posts
    Rep Power
    108
    All the PC's are in the same OU folder.

  14. #14
    dbsocs08's Avatar
    Join Date
    Nov 2008
    Location
    Oxford
    Posts
    12
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    have you tried running the rsop snap in on the client machine, I know the GPO results showed that it had applied, but obviously it hasn't. If you run that you can see exactly what is being applied to the machine.

  15. #15

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,644
    Thank Post
    858
    Thanked 645 Times in 428 Posts
    Rep Power
    498
    There's a reg hack for the issue of 2 DCs - something to do with DC priorities...

    linky 1 - LdapSrvWeight

    Linky 2 - LdapSrvPriority

    Had this issue myself - only noticed cos of my KiX scripts!

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Certain Parts of GPO not applying
    By Kyle in forum Windows
    Replies: 1
    Last Post: 5th March 2008, 07:26 PM
  2. Replies: 8
    Last Post: 9th November 2007, 01:33 PM
  3. Permission set on redirected folder not applying (GPO issue)
    By projector1 in forum Wireless Networks
    Replies: 3
    Last Post: 14th February 2007, 12:46 PM
  4. Folder redirection gpo not applying
    By pooley in forum Windows
    Replies: 9
    Last Post: 29th October 2006, 08:56 AM
  5. Applying Backgrounds
    By adamyoung in forum Windows
    Replies: 4
    Last Post: 13th March 2006, 06:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •