GPO won't update

Forum Windows 2000/NT : Windows 2000/NT General Discussion - GPO won't update

TomsGuide.com: Over 800,000 questions and answers to address all your high-tech questions. Sign up now! Its free!
Word :    Username :           
 

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.group_policy (More info?)

 

Here the deal I am trying to disable internet to a group of our users so I
enter in a proxy address of 0.0.0.0 and added a few sites to such as our
intranet and I have the selected the option to by pass the proxy for
intranet sites. I'd called this policy Intranet. Okay here where the
problem comes in when I run a GPResult I get the Intranet only on the
"Registry" but there is Local Group Policy and Default Domain Policy in
there. The only this is Intranet is only listed in Registry setting.
Everything else like Security and EFS has Local Group Policy and Default
Domain Policy. Also up on top it says " The user recieve "Registry" setting
from these GPOs:
Local Group Policy

Not sure why it taking so long, been 2 days now and I check the App log in
event viewer. It say the policy took place. Below is a copy of my GPO
result. Please advised me on what I should do. This is a Win2K Pro box and
I am running Win2K3 network.


Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Wednesday, August 24, 2005 at 2:53:36 PM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.0.2195.Service Pack 4
Terminal Server Mode: Not supported

###############################################################

User Group Policy results for:

CN=Production,CN=Users,DC=Domain1,DC=Domain-Controller,DC=com

Domain Name: Domain-Controller
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\Production

The user is a member of the following security groups:

Domain-Controller\Domain Users
\Everyone
BUILTIN\Users
BUILTIN\Power Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL


###############################################################

Last time Group Policy was applied: Wednesday, August 24, 2005 at 2:49:36 PM
Group Policy was applied from: Server1.Domain1.Domain-Controller.com


===============================================================


The user received "Registry" settings from these GPOs:

Local Group Policy



###############################################################

Computer Group Policy results for:

CN=NJ_TRAINING_03,OU=Intranet Only,DC=Domain1,DC=Domain-Controller,DC=com

Domain Name: Domain-Controller
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Power Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
Domain-Controller\NJ_TRAINING_03$
Domain-Controller\Domain Computers

###############################################################

Last time Group Policy was applied: Wednesday, August 24, 2005 at 1:15:33 PM
Group Policy was applied from: Server1.Domain1.Domain-Controller.com


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Default Domain Policy
Internal


===============================================================
The computer received "Security" settings from these GPOs:

Local Group Policy
Default Domain Policy


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Default Domain Policy

Sponsored Links
Register or log in to remove.
- 0 +

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.group_policy (More info?)

 

You are actually missing your "Intranet" GPO in the output of gpresult.exe,
right? This can have a multitude of reasons:
a) check whether the GPO is linked to a container (or one of its parents)
where the user object resides (from your explanations I assume that you've
configured "User" settings
b) check whether the users log on using their domain account - if not, they
will only get Computer policy
c) check whether security filtering / WMI-filtering is configured for this GPO
d) check whether the GPO link is active
e) check the GPO status in GPMC - you may have inadvertently switched off
the user part of your GPO
f) check for AD replication problems - e.g. use "replmon.exe" on your DC,
add a DC to the list of "Monitored Servers", right-click the DC and select
"Show Group Policy Object Status". GPOs that are marked with an 'x' in the
"Synch" column have replication issues.

Good luck!


"WooYing" wrote:

> Here the deal I am trying to disable internet to a group of our users so I
> enter in a proxy address of 0.0.0.0 and added a few sites to such as our
> intranet and I have the selected the option to by pass the proxy for
> intranet sites. I'd called this policy Intranet. Okay here where the
> problem comes in when I run a GPResult I get the Intranet only on the
> "Registry" but there is Local Group Policy and Default Domain Policy in
> there. The only this is Intranet is only listed in Registry setting.
> Everything else like Security and EFS has Local Group Policy and Default
> Domain Policy. Also up on top it says " The user recieve "Registry" setting
> from these GPOs:
> Local Group Policy
>
> Not sure why it taking so long, been 2 days now and I check the App log in
> event viewer. It say the policy took place. Below is a copy of my GPO
> result. Please advised me on what I should do. This is a Win2K Pro box and
> I am running Win2K3 network.
>
>
> Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
> Copyright (C) Microsoft Corp. 1981-1999
>
>
> Created on Wednesday, August 24, 2005 at 2:53:36 PM
>
>
> Operating System Information:
>
> Operating System Type: Professional
> Operating System Version: 5.0.2195.Service Pack 4
> Terminal Server Mode: Not supported
>
> ###############################################################
>
> User Group Policy results for:
>
> CN=Production,CN=Users,DC=Domain1,DC=Domain-Controller,DC=com
>
> Domain Name: Domain-Controller
> Domain Type: Windows 2000
> Site Name: Default-First-Site-Name
>
> Roaming profile: (None)
> Local profile: C:\Documents and Settings\Production
>
> The user is a member of the following security groups:
>
> Domain-Controller\Domain Users
> \Everyone
> BUILTIN\Users
> BUILTIN\Power Users
> NT AUTHORITY\INTERACTIVE
> NT AUTHORITY\Authenticated Users
> \LOCAL
>
>
> ###############################################################
>
> Last time Group Policy was applied: Wednesday, August 24, 2005 at 2:49:36 PM
> Group Policy was applied from: Server1.Domain1.Domain-Controller.com
>
>
> ===============================================================
>
>
> The user received "Registry" settings from these GPOs:
>
> Local Group Policy
>
>
>
> ###############################################################
>
> Computer Group Policy results for:
>
> CN=NJ_TRAINING_03,OU=Intranet Only,DC=Domain1,DC=Domain-Controller,DC=com
>
> Domain Name: Domain-Controller
> Domain Type: Windows 2000
> Site Name: Default-First-Site-Name
>
>
> The computer is a member of the following security groups:
>
> BUILTIN\Administrators
> \Everyone
> BUILTIN\Power Users
> BUILTIN\Users
> NT AUTHORITY\NETWORK
> NT AUTHORITY\Authenticated Users
> Domain-Controller\NJ_TRAINING_03$
> Domain-Controller\Domain Computers
>
> ###############################################################
>
> Last time Group Policy was applied: Wednesday, August 24, 2005 at 1:15:33 PM
> Group Policy was applied from: Server1.Domain1.Domain-Controller.com
>
>
> ===============================================================
>
>
> The computer received "Registry" settings from these GPOs:
>
> Local Group Policy
> Default Domain Policy
> Internal
>
>
> ===============================================================
> The computer received "Security" settings from these GPOs:
>
> Local Group Policy
> Default Domain Policy
>
>
> ===============================================================
> The computer received "EFS recovery" settings from these GPOs:
>
> Local Group Policy
> Default Domain Policy
>
>
>

Reply to Stephan

Archived from groups: microsoft.public.win2000.group_policy,microsoft.public.windows.group_policy (More info?)

 

Stephan see my comments below


"Stephan" <Stephan@discussions.microsoft.com> wrote in message
news:D499F8D5-98DB-4ACE-86DA-597C12A9B292@microsoft.com...
> You are actually missing your "Intranet" GPO in the output of
gpresult.exe,
> right? This can have a multitude of reasons:
> a) check whether the GPO is linked to a container (or one of its parents)
> where the user object resides (from your explanations I assume that you've
> configured "User" settings
I have changes on the computer account as well as user account.

> b) check whether the users log on using their domain account - if not,
they
> will only get Computer policy

Yes, they are,

> c) check whether security filtering / WMI-filtering is configured for this
GPO

WMI filtering is set to off.

> d) check whether the GPO link is active (Set to Enforced)

Checked in the group policy inhertance and Intranet is set to 1 and 2 is the
Default Domain Policy

> e) check the GPO status in GPMC - you may have inadvertently switched off
> the user part of your GPO

Not sure how to do this

> f) check for AD replication problems - e.g. use "replmon.exe" on your DC,
> add a DC to the list of "Monitored Servers", right-click the DC and select
> "Show Group Policy Object Status". GPOs that are marked with an 'x' in the
> "Synch" column have replication issues.

No X mark anywhere
>
> Good luck!
>
>
> "WooYing" wrote:
>
> > Here the deal I am trying to disable internet to a group of our users so
I
> > enter in a proxy address of 0.0.0.0 and added a few sites to such as our
> > intranet and I have the selected the option to by pass the proxy for
> > intranet sites. I'd called this policy Intranet. Okay here where the
> > problem comes in when I run a GPResult I get the Intranet only on the
> > "Registry" but there is Local Group Policy and Default Domain Policy in
> > there. The only this is Intranet is only listed in Registry setting.
> > Everything else like Security and EFS has Local Group Policy and Default
> > Domain Policy. Also up on top it says " The user recieve "Registry"
setting
> > from these GPOs:
> > Local Group Policy
> >
> > Not sure why it taking so long, been 2 days now and I check the App log
in
> > event viewer. It say the policy took place. Below is a copy of my GPO
> > result. Please advised me on what I should do. This is a Win2K Pro box
and
> > I am running Win2K3 network.
> >
> >
> > Microsoft (R) Windows (R) 2000 Operating System Group Policy Result tool
> > Copyright (C) Microsoft Corp. 1981-1999
> >
> >
> > Created on Wednesday, August 24, 2005 at 2:53:36 PM
> >
> >
> > Operating System Information:
> >
> > Operating System Type: Professional
> > Operating System Version: 5.0.2195.Service Pack 4
> > Terminal Server Mode: Not supported
> >
> > ###############################################################
> >
> > User Group Policy results for:
> >
> > CN=Production,CN=Users,DC=Domain1,DC=Domain-Controller,DC=com
> >
> > Domain Name: Domain-Controller
> > Domain Type: Windows 2000
> > Site Name: Default-First-Site-Name
> >
> > Roaming profile: (None)
> > Local profile: C:\Documents and Settings\Production
> >
> > The user is a member of the following security groups:
> >
> > Domain-Controller\Domain Users
> > \Everyone
> > BUILTIN\Users
> > BUILTIN\Power Users
> > NT AUTHORITY\INTERACTIVE
> > NT AUTHORITY\Authenticated Users
> > \LOCAL
> >
> >
> > ###############################################################
> >
> > Last time Group Policy was applied: Wednesday, August 24, 2005 at
2:49:36 PM
> > Group Policy was applied from: Server1.Domain1.Domain-Controller.com
> >
> >
> > ===============================================================
> >
> >
> > The user received "Registry" settings from these GPOs:
> >
> > Local Group Policy
> >
> >
> >
> > ###############################################################
> >
> > Computer Group Policy results for:
> >
> > CN=NJ_TRAINING_03,OU=Intranet
Only,DC=Domain1,DC=Domain-Controller,DC=com
> >
> > Domain Name: Domain-Controller
> > Domain Type: Windows 2000
> > Site Name: Default-First-Site-Name
> >
> >
> > The computer is a member of the following security groups:
> >
> > BUILTIN\Administrators
> > \Everyone
> > BUILTIN\Power Users
> > BUILTIN\Users
> > NT AUTHORITY\NETWORK
> > NT AUTHORITY\Authenticated Users
> > Domain-Controller\NJ_TRAINING_03$
> > Domain-Controller\Domain Computers
> >
> > ###############################################################
> >
> > Last time Group Policy was applied: Wednesday, August 24, 2005 at
1:15:33 PM
> > Group Policy was applied from: Server1.Domain1.Domain-Controller.com
> >
> >
> > ===============================================================
> >
> >
> > The computer received "Registry" settings from these GPOs:
> >
> > Local Group Policy
> > Default Domain Policy
> > Internal
> >
> >
> > ===============================================================
> > The computer received "Security" settings from these GPOs:
> >
> > Local Group Policy
> > Default Domain Policy
> >
> >
> > ===============================================================
> > The computer received "EFS recovery" settings from these GPOs:
> >
> > Local Group Policy
> > Default Domain Policy
> >
> >
> >

Reply to Anonymous
Tom's Guide > Forum > Windows 2000/NT > Windows 2000/NT General Discussion > GPO won't update
Go to:

There are 12 identified and unidentified users. To see the list of identified users, Click here.

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel
Google ads