| Author |
Message |
DMJR
Guest
|
 Posted:
Mon Oct 24, 2005 8:51 am Post subject:
GPO's |
|
|
I think I made a mistake and I cannot correct it with regard to GPO's.
I had a Group Policy that for some reason was in the Group Policy Objects
section in Group Policy Management rather than under the domain (higher up).
I determined that the information in it was the same as another GPO so I
deleted it, but with one problem, I never removed the people to which that
policy pertained, this in turn caused the policy to stay in effect but
without me being able to delete the delegation. I have determined this to be
the case since I have then made a new Policy inacting a different wall paper
to see what happens and it does nothing, the wallpaper from the old policy
continues to appear. Is there something I can do short and deleting the
users all together and re-adding them so that they have a different unique ID?
Please help I am pulling my hairs out with this, and ask if I did not make
myself clear.
Thanks |
|
| Back to top |
|
 |
DMJR
Guest
|
| Posted:
Mon Oct 24, 2005 8:51 pm Post subject:
Re: GPO's |
|
|
Dave
thanks for the response. this is exactly what I thought (that it would
clear by iteself) but its not, the user PC's continue to have policies
inflicted on them that I cannot take off and they are not listed under any of
the GPO's in my domain or otherwise.
Is there any other place I can look, I mean its been like this since Friday
and I have even tried to restart the Server and nothing...
Thanks for your help
"Dave Nickason [SBS MVP]" wrote:
| Quote: | My guess is that this is fixed by now, or will be tomorrow. I'm thinking
that it's taking a few reboots for the new policy to apply. You could try
going to a command prompt on a workstation and typing "gpupdate /force"
without the quotes to see if you can force it sooner.
In any case, deleting the one you deleted should not have caused any
problems. You don't have to do anything special prior to deleting the
policy.
Some policies are applied at the domain level - the ones you're seeing at
the top under yourdomain.local. Others are applied to specific
organizational units (OU's) such as MyBusiness/Computers. Many people
believe that the use of domain-wide policies should be minimized and that
policies are better applied more granularly to individual or multiple OUs.
If nothing else, you may want to test a policy on one or two machines before
imposing it on your whole network.
"DMJR" <DMJR@discussions.microsoft.com> wrote in message
news:E21E9E2C-6D3C-4A69-AB2C-1F60D55CB074@microsoft.com...
I think I made a mistake and I cannot correct it with regard to GPO's.
I had a Group Policy that for some reason was in the Group Policy Objects
section in Group Policy Management rather than under the domain (higher
up).
I determined that the information in it was the same as another GPO so I
deleted it, but with one problem, I never removed the people to which that
policy pertained, this in turn caused the policy to stay in effect but
without me being able to delete the delegation. I have determined this to
be
the case since I have then made a new Policy inacting a different wall
paper
to see what happens and it does nothing, the wallpaper from the old policy
continues to appear. Is there something I can do short and deleting the
users all together and re-adding them so that they have a different unique
ID?
Please help I am pulling my hairs out with this, and ask if I did not make
myself clear.
Thanks
|
|
|
| Back to top |
|
|
Dave Nickason [SBS MVP]
Guest
|
| Posted:
Mon Oct 24, 2005 8:51 pm Post subject:
Re: GPO's |
|
|
My guess is that this is fixed by now, or will be tomorrow. I'm thinking
that it's taking a few reboots for the new policy to apply. You could try
going to a command prompt on a workstation and typing "gpupdate /force"
without the quotes to see if you can force it sooner.
In any case, deleting the one you deleted should not have caused any
problems. You don't have to do anything special prior to deleting the
policy.
Some policies are applied at the domain level - the ones you're seeing at
the top under yourdomain.local. Others are applied to specific
organizational units (OU's) such as MyBusiness/Computers. Many people
believe that the use of domain-wide policies should be minimized and that
policies are better applied more granularly to individual or multiple OUs.
If nothing else, you may want to test a policy on one or two machines before
imposing it on your whole network.
"DMJR" <DMJR@discussions.microsoft.com> wrote in message
news:E21E9E2C-6D3C-4A69-AB2C-1F60D55CB074@microsoft.com...
| Quote: | I think I made a mistake and I cannot correct it with regard to GPO's.
I had a Group Policy that for some reason was in the Group Policy Objects
section in Group Policy Management rather than under the domain (higher
up).
I determined that the information in it was the same as another GPO so I
deleted it, but with one problem, I never removed the people to which that
policy pertained, this in turn caused the policy to stay in effect but
without me being able to delete the delegation. I have determined this to
be
the case since I have then made a new Policy inacting a different wall
paper
to see what happens and it does nothing, the wallpaper from the old policy
continues to appear. Is there something I can do short and deleting the
users all together and re-adding them so that they have a different unique
ID?
Please help I am pulling my hairs out with this, and ask if I did not make
myself clear.
Thanks |
|
|
| Back to top |
|
|
Dave Nickason [SBS MVP]
Guest
|
| Posted:
Tue Oct 25, 2005 12:50 am Post subject:
Re: GPO's |
|
|
Sometimes policies take two or three workstation reboots, depending on what
they're doing. You shouldn't have to reboot the server. Remember that for
some things, there could be a policy set on the workstation, or a manual
setting chosen by the user. Your problem might not be the old GPO, it might
be that the new one is not applying for some reason.
Here's something you can do that's pretty cool. On a workstation, click
Start - Run. Type in MMC and click OK to bring up an empty console. Click
File -> Add/remove Snap-in. Add the snap-in called "Resultant Set of
Policy." Under the Console Root, r-click Resultant Set of Policy and click
Generate RSoP Data. Follow the wizard to generate the RSoP, accepting the
defaults of logging mode, logged in user, etc. This will show you all of
the policies applied to that workstation and to the logged in user,
including which GPO they were applied from.
"DMJR" <DMJR@discussions.microsoft.com> wrote in message
news:54FA3748-CEF4-452A-AC3C-1E1D5CDC8E24@microsoft.com...
| Quote: | Dave
thanks for the response. this is exactly what I thought (that it would
clear by iteself) but its not, the user PC's continue to have policies
inflicted on them that I cannot take off and they are not listed under any
of
the GPO's in my domain or otherwise.
Is there any other place I can look, I mean its been like this since
Friday
and I have even tried to restart the Server and nothing...
Thanks for your help
"Dave Nickason [SBS MVP]" wrote:
My guess is that this is fixed by now, or will be tomorrow. I'm thinking
that it's taking a few reboots for the new policy to apply. You could
try
going to a command prompt on a workstation and typing "gpupdate /force"
without the quotes to see if you can force it sooner.
In any case, deleting the one you deleted should not have caused any
problems. You don't have to do anything special prior to deleting the
policy.
Some policies are applied at the domain level - the ones you're seeing at
the top under yourdomain.local. Others are applied to specific
organizational units (OU's) such as MyBusiness/Computers. Many people
believe that the use of domain-wide policies should be minimized and that
policies are better applied more granularly to individual or multiple
OUs.
If nothing else, you may want to test a policy on one or two machines
before
imposing it on your whole network.
"DMJR" <DMJR@discussions.microsoft.com> wrote in message
news:E21E9E2C-6D3C-4A69-AB2C-1F60D55CB074@microsoft.com...
I think I made a mistake and I cannot correct it with regard to GPO's.
I had a Group Policy that for some reason was in the Group Policy
Objects
section in Group Policy Management rather than under the domain (higher
up).
I determined that the information in it was the same as another GPO so
I
deleted it, but with one problem, I never removed the people to which
that
policy pertained, this in turn caused the policy to stay in effect but
without me being able to delete the delegation. I have determined this
to
be
the case since I have then made a new Policy inacting a different wall
paper
to see what happens and it does nothing, the wallpaper from the old
policy
continues to appear. Is there something I can do short and deleting
the
users all together and re-adding them so that they have a different
unique
ID?
Please help I am pulling my hairs out with this, and ask if I did not
make
myself clear.
Thanks
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in