Jason1975

Hi Steve Thanks for the reply. Been researching if I can run RSOP under the admin account but for student user and it does not seem like one can. I can't run RSOP under student accounts as they have the cmd prompt locked down and when I tried to add CMD.exe to the GPO I have the same issue where the permission is not making it to the client PC. An interesting thing I saw earlier is that when the computer reboots (the one that has been renamed and rejoined a few times) it now shows the last username that has been logged on. Our Policy should apply to show as a blank windows login page without any prior usernames being displayed. Curious...

Hi everyone. I have a frustrating GPO issue that I am running out of ideas to fix. I would greatly appreciate any advice. Here is a breakdown. I use a GPO to specify what software students are allowed to run. This has worked flawlessly the last 3 years. Yesterday I added 2 new applications, which is now only running on some computers. So here is what happens: Test Student logs onto PC 1 in class - Software does not work. Test Student logs onto PC 2 in class - Software works. I then place the test student into the teacher group, log into PC 1 and the software works. This seems to imply that the software is working fine. I have tried the usual gpupdates on client and server, and I have also tried leaving and joining the domain, renaming etc. In terms of trying to work out if this is GPO related: 1. Faulty GPO - PC 2 would not run the software if the Student GPO was faulty. 2. Faulty PC account - This seems unlikely due to the rename and rejoin with fresh credentials. We have 2 DC's - Originally it seemed like the software was only failing when computers validated against the second DC, but I found the same issue on DC 1 as well. The real kicker is that one pc that was failing with the error yesterday now works. (BTW the error is just the standard 'the operation has been cancelled due to restrictions on this computer) Any help would be appreciated! Thanks Jason