Announcement

Collapse
No announcement yet.

need help troubleshooting GP in 2008/win 7

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • need help troubleshooting GP in 2008/win 7

    guys, I have several GPO's that I've created in GP Management at the Domain level, but they are not taking effect at the client machine. I'm applying these GPO's to users and not to computers. Let me clarify that all these it is in a test scenario in vmware workstation between a win 2008 server and a win 7 machine. Because the fact that I clone the client machine I changed its SID, but still no luck with getting the settings.
    here are some of the GP:

  • #2
    Re: need help troubleshooting GP in 2008/win 7

    I presume you've run Group Policy Results?
    Are the policies showing as being applied?

    When you cloned the clients, did you run SYSPREP first?
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: need help troubleshooting GP in 2008/win 7

      yes, I did run sysprep.... and also GPresult on the client machine

      Code:
      C:\>gpresult /USER saleuser2 /V
      
      Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
      Copyright (C) Microsoft Corp. 1981-2001
      
      Created On 4/21/2010 at 3:58:50 AM
      
      
      RSOP data for VIRTUALDOMAIN\saleuser2 on VIN7-VM2 : Logging Mode
      -----------------------------------------------------------------
      
      OS Configuration:      Member Workstation
      OS Version:         6.1.7600
      Site Name:          N/A
      Roaming Profile:       N/A
      Local Profile:        C:\Users\saleuser2
      Connected over a slow link?: No
      
      
      USER SETTINGS
      --------------
        CN=saleuser2,OU=Sales,DC=virtualdomain,DC=com
        Last time Group Policy was applied: 4/21/2010 at 3:56:28 AM
        Group Policy was applied from:   WIN2K8-VM.virtualdomain.com
        Group Policy slow link threshold:  500 kbps
        Domain Name:            VIRTUALDOMAIN
        Domain Type:            Windows 2000
      
        Applied Group Policy Objects
        -----------------------------
          Disable Add/Remove Programs
          Create Desktop Shortcut
          Folder Redirection
      
        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
          Default Domain Policy
            Filtering: Not Applied (Empty)
      
          Local Group Policy
            Filtering: Not Applied (Empty)
      
          Block Removable Devices
            Filtering: Not Applied (Empty)
      
        The user is a part of the following security groups
        ---------------------------------------------------
          Domain Users
          Everyone
          BUILTIN\Users
          NT AUTHORITY\INTERACTIVE
          CONSOLE LOGON
          NT AUTHORITY\Authenticated Users
          This Organization
          LOCAL
          sales
          Medium Mandatory Level
      
        The user has the following security privileges
        ----------------------------------------------
      
      
        Resultant Set Of Policies for User
        -----------------------------------
      
          Software Installations
          ----------------------
            N/A
      
          Logon Scripts
          -------------
            N/A
      
          Logoff Scripts
          --------------
            N/A
      
          Public Key Policies
          -------------------
            N/A
      
          Administrative Templates
          ------------------------
            GPO: Disable Add/Remove Programs
              KeyName:   Software\Microsoft\Windows\CurrentVersion\Policies\
      Uninstall\NoAddRemovePrograms
              Value:    1, 0, 0, 0
              State:    Enabled
      
          Folder Redirection
          ------------------
            GPO: Folder Redirection
              KeyName:   InstallationType: basic
                Grant Type:    Exclusive Rights
                Move Type:     Contents of Local Directory moved
                Policy Removal:  Leave folder in existing location
                Redirecting Group: N/A
                Redirected Path:  \\WIN2K8-VM\userdocs\%USERNAME%\Documents
      
      
          Internet Explorer Browser User Interface
          ----------------------------------------
            N/A
      
          Internet Explorer Connection
          ----------------------------
            N/A
      
          Internet Explorer URLs
          ----------------------
            N/A
      
          Internet Explorer Security
          --------------------------
            N/A
      
          Internet Explorer Programs
          --------------------------
      it seems that 3 of the 4 gpos are getting applied which are:
      1-folder redirection
      2- shortcut
      3- disable add/remove program
      However, out of those 3 I'm only getting the folder redirection because when I click on the target of my document it is on the server. But when I click "Install Program" in Control Panel, it allows me to open the window. However, this setting it takes effect in another machine this one a win xp.... and none of them are getting the shortcut. the shortcut I'm able to access via UNC from both machine, but still it is not working
      and I have no idea why the "Block Removable Devices" is not applying.

      any help appreciated

      Comment

      Working...
      X