abillybob Posted September 18, 2013 Posted September 18, 2013 Hey Guys So in September we had a few new children that weren't here the year before and because of this they needed accounts making on the fly. So I stuck the new user accounts under the Student OU and made the new student a member of Student Security Group. All of which is linked to our student Group Policy Lockdown. It would seem that the new students are only getting some GP applied and other not for example hiding the C: drive!! It has applied properly for all other students just not the new ones. Very weird, I have tried everything I can think of GP Update etc.... but nothing seems to help! Any Ideas?? Thanks Guys
witch Posted September 18, 2013 Posted September 18, 2013 How did you create them? Did you copy one in AD? ( In case someone doesn't know -copying a user gives you a user all filled in except for the name - very useful!) I find that is the best way to make sure that the new user gets the exact same settings as the old one - groups, membership, etc Have you looked to see which policies are actually applying using GPresult?
abillybob Posted September 18, 2013 Author Posted September 18, 2013 How did you create them? Did you copy one in AD? Have you looked to see which policies are actually applying using GPresult? I didn't even know you could copy them like that!! That'll save me loads of time how do you do it?? Yeah GPresult shows all the correct policies are applying though they aren't!!!
kernewek-sam Posted September 18, 2013 Posted September 18, 2013 (edited) I find it's the easiest way too. Here is the technet guide Copy a user account: Active Directory Edit: remember to change their user area share, as I may have forgotten to once Edited September 18, 2013 by kernewek-sam
abillybob Posted September 18, 2013 Author Posted September 18, 2013 Thanks guys big help! It has now applied GP Settings weirdly although is putting everything into windows classic theme! I want it to be Aero which is set in GP anyway!! I was going to just delete the profile folder of the account - delete it from AD and delete the Home Drive and re create it again with the method you have shown though just went to the place where profiles are saved and it says I don't have permissions to delete this folder! WTF I'm administrator..... All boxes are ticked to say stcatherinesint\administrator has full control under security settings yet I just can't get rid of it!!! grrr
witch Posted September 19, 2013 Posted September 19, 2013 Have you tried taking ownership as someone else? Making sure you are a member of that group of course - eg network administrator etc?
abillybob Posted September 19, 2013 Author Posted September 19, 2013 Have you tried taking ownership as someone else? Making sure you are a member of that group of course - eg network administrator etc? Ah Sorted Thankyou!
witch Posted September 19, 2013 Posted September 19, 2013 Blimey - I'm on a roll here - glad I could help 1
abillybob Posted September 19, 2013 Author Posted September 19, 2013 Haha! What would I do without you Witch!?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now