GPO's apply fine, GPP's dont..

[plexer]

As you're applying that under computer configuration can the computer account access your home folder?

 

Probably not so try with a location that computers or authenticated users can access?

 

Ben

[glennda]

is the location you are trying to copy from free and open access to everyone? Or is the share and NTFS permissions setup just for staff/you?

[Little-Miss]

so if i change it to user and add it to somewhere like netlogon?

[sonofsanta]

so if i change it to user and add it to somewhere like netlogon?

 

Computer is fine, but move the source file to an open share somewhere - something like an AppDeploy server share, where all your software is installed from. DOMAIN\Domain Computers will require at least (I think) read access to the original file to be able to copy it.

 

Alternatively, for the sake of the testing, you could add Domain Computers to the permissions of that file/folder.

[plexer]

Authenticated users will do it as domain computers are authenticated users.

 

Policy settings incorrectly applied or denied due to security filtering: Group Policy

 

Ben

[Little-Miss]

I'm not getting anything from this....

 

In Event Viewer GroupPolicy its listed under list of applicable Group Policy Objects.

 

I've put it into my apps folder which Domain Computers have access to. Still nothing...

[X-13]

This is starting to sound more and more like a literal case of "computer says no."

 

Have you tried running it as a batch file on your admin login? [iIRC the system account has admin rights.]

 

Another thing I'll mention, I'm not sure you can use "C:\". Doesn't C:\ map at login? [i've had that exact problem before with a startup script.]

 

Try %windir%\bloop\EhMuhGerdWallpaper.jpg or %ProgramFiles%\bleep\EhMuhGerdWallpaper.jpg

Edited December 3, 2012 by X-13

[Little-Miss]

just to test it all, i'm trying to copy a text file from a share onto the client and am not having any luck.

 

I just tried using %windir% but doesn't seem to have made any difference.

[Willott]

First step, in Group Policy Management (either on server or through RSAT), scroll to bottom and right click on group policy results and run the wizard targetting the VM you've got running and whatever user - check to see if your GPP shows in the settings tab of the report which will appear. This should give details of a winning GPO, and a result of the application, which may include an error code, which could help decipher where things are going amiss.

 

Cheers

 

Will

[Little-Miss]

(didnt think to check other tabs *blush*) ok, interestingly im trying to run a script to get BGInfo to work, that has an error..."An unknown error occurred while data was gathered for this extension. Details: Not found " - great, thanks for that.

 

My other "test" (move file from share to client) isnt appearing in the model at all...

[Willott]

Right, so if the file copy is not appearing, under the summary tab, expand computer config summary and gpos, and see if your policy is under either applied or denied GPOs and then we'll look at where to look next.

 

Cheers

 

Will

[Little-Miss]

According to the summary, there is nothing set under Computer config...(LIES)

[Willott]

Can you screenshot the summary page with anything that will expand expanded? Or right click on the "user on machine" item under Group Policy results, and do save report and stick it on here so we can check it? Edited December 3, 2012 by Willott

[Little-Miss]

oh, i just ran the test again....now i have component status error....

 

Group Policy Files failed due to the error listed below and failed to log resultant set of policy information.

 

 

 

Additional information may have been logged. Review the application event log on the domain controller on which the simulation was run for events between 03/12/2012 14:18:51 and 03/12/2012 14:18:51.

 

Had a quick look in Event viewer but wasnt very successful at finding anything. Googling comes up with a hotfix but i must already have it as it wont apply.

[Cache]

I've just set something up exactly the same as you and it seems to work ok for me. Comparing the screenshot to what I've got though, you've shown the setting in your group policy but not the Group Policy Result when you run it against the computer from the group policy management console. Any chance you could post a screenshot of it as it can provide error information and results for individual preference items? Edited December 3, 2012 by Cache

[Little-Miss]

 

seems happy enough...yet no file...

[Little-Miss]

and what's all this about!?

 

[Michael]

How many DCs do you have?

[Little-Miss]

1 DC (2003 listed with all FSMO roles), 2k8 server sits along side it should be replicating...ive done a repadmin and it was successful...

[Michael]

It does sound like a replication ish issue, despite repadmin coming back with the all OK.

 

I presume both servers are DNS servers too? Ideally I would look to putting in a 2008 R2 server and demoting the 2003 server. You could of course transfer all FSMO roles to a temp server or your other 2008 R1 server, wipe it then put 2008 R2 on it.

 

If you install RSAT on a Windows 7 workstation, does this show up GPOs you've setup presumably from your 2008 R1 server?

[Little-Miss]

Sorry should have said my 2k8 is R2...i always forget that crucial bit of info!! lol

[Michael]

That's good, what about the DNS and RSAT questions?

[Little-Miss]

Both DNS..

 

RSAT....to be honest, im just trying to get my head around lol!

[Michael]

I apologise if you know this already - but it's simply a case of installing it on a Windows 7 workstation (over lunch as it takes forever), then go into Programs and Features > Turn windows features on and off.

 

You can then turn on whatever you require, so for example you can control/manage Active Directory, DNS, DHCP etc.. from your Windows 7 workstation without the need to touch or login to your server.

[Little-Miss]

Tis all installed it all....

 

just trying to work out what to do next! lol *blush*