Announcement

Collapse
No announcement yet.

Enforced GPOs

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Enforced GPOs

    From what I know, a GPO which is set to Enforced will overwrite the same settings in other GPOs.

    I have a GPO which runs a logon script called "Logon Script 2.x (User)". I then created a copy of this GPO (called "Logon Script 2.x (User)__TEST_GPO__") and changed the target logon script to a new script which I was testing. Since I knew about the Enforced property, I thought I would simply Enforce the new GPO and it would overwrite the original GPO, but this doesn't seem to be the case.

    Am I correct in saying that there can only be ONE logon script run in a domain for each user?

    I checked my test workstation via GPResult and here's what I get:
    Code:
    USER SETTINGS
    --------------
        CN=JulianTest,OU=Users,OU=Lightly Managed,OU=TestSiteOU,DC=scl,DC=signet,DC=
    com,DC=au
        Last time Group Policy was applied: 1/02/2008 at 12:36:43 PM
        Group Policy was applied from:      cla-dc1.scl.signet.com.au
        Group Policy slow link threshold:   500 kbps
    
        Applied Group Policy Objects
        -----------------------------
            Logon Script 2.x (User)__TEST_GPO__
            Lightly Managed v0.2 (User)
            Logon Script 2.x (User)
            MS Office 2003 Settings (User)
            [ALL] Setup IE proxy settings for Squid
            Default Domain Policy
            Redirected Folders (User)
            Trusted websites for Customer Service
    
        The following GPOs were not applied because they were filtered out
    ....
    ....
    Is this the order that the GPOs were applied in?
    Last edited by JDMils; 1st February 2008, 03:04.
    |
    +-- JDMils
    |
    +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
    |

  • #2
    Re: Enforced GPOs

    why not do an RSOP.msc on a client machine/user that has the policy applied and see what it tells you...
    Technology is only as good as those who use it

    My tech blog - wiredtek.wordpress.com

    Comment


    • #3
      Re: Enforced GPOs

      That's not true........All the logon scripts run.

      Regards,
      Kapil Sharma
      ~~~~~~~~~~~~~
      Life is too short, Enjoy It.

      Comment


      • #4
        Re: Enforced GPOs

        That is what i was thinking kapil. But the rsop.msc will show you exactly what is being applied. Not on a per policy basis but overall.
        Technology is only as good as those who use it

        My tech blog - wiredtek.wordpress.com

        Comment


        • #5
          Re: Enforced GPOs

          Yes. But Rsop will tell the winning GPO at least. And I would suggest you to go for some other option to avoid that GPO like filtering or block inheritance.......

          Regards,
          Kapil Sharma
          ~~~~~~~~~~~~~
          Life is too short, Enjoy It.

          Comment


          • #6
            Re: Enforced GPOs

            Originally posted by kapilsharma11 View Post
            That's not true........All the logon scripts run.

            Regards,
            All the logon scripts will run, yes, but not if they both apply to the same machine. It seems from my testing that the first applied GPO will run the logon script then when the Enforced GPO is applied, the logon script does not run.
            |
            +-- JDMils
            |
            +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
            |

            Comment

            Working...
            X