Announcement

Collapse
No announcement yet.

Group Policy issue

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group Policy issue

    Howdy guys
    Got a problem with Group Policy.
    Have created a GPO and linked it with an OU.
    I created a few users, and used the first user as a test account.
    When I log in as this user, policy works fine, everything is as it's defined in the GPO, folders correctly redirect, etc.
    But when I log on as the next user, there is no policy defined, there is a standard Start Menu, Programs list, different desktop wallpaper, etc.
    Both user accounts are in the same OU.
    Both have roaming profiles and home drives in the same shares on the same servers.

    Anyone know why one gets the policy definitions and one doesn't?

    Cheers

    JHH

  • #2
    Re: Group Policy issue

    Originally posted by johnhenryshammer
    Howdy guys
    Got a problem with Group Policy.
    Have created a GPO and linked it with an OU.
    I created a few users, and used the first user as a test account.
    When I log in as this user, policy works fine, everything is as it's defined in the GPO, folders correctly redirect, etc.
    But when I log on as the next user, there is no policy defined, there is a standard Start Menu, Programs list, different desktop wallpaper, etc.
    Both user accounts are in the same OU.
    Both have roaming profiles and home drives in the same shares on the same servers.

    Anyone know why one gets the policy definitions and one doesn't?

    Cheers

    JHH

    Are you logging in to the same computer when you test your GPOs or are you logging into different computers? This could easily explain why. The first computer has refreshed group policy and has received the new GPOs while the second computer has not.

    If you are logging on to the same computer to test both accounts, then a different problem may exist. I suggest using the Resultant Set of Policy tools to examine this behavior. RSOP can be run from a few different places. On the client machine (rsop.msc), in Active Directory Users or Computers (dsa.msc), or in the Group Policy Management Console (gpmc.msc).

    Some other questions:
    Are the GPOs defining computer configuration or user configuration?
    Are you blocking policy inheritance anywhere in your OU structure?
    Are you applying no override to GPO links anywhere in your OU structure?
    Have you checked the event log on the client machine where GPOs are not applying?
    Have you tried running a gpupdate /force on the client machine where GPOs are not applying?
    If different client machines, are both in the same site, pointing to the same %logonserver%?
    If not, is Active Directory replication working properly in your domain?

    Jas
    Attached Files
    Last edited by jasonboche; 1st July 2006, 15:55.
    VCDX3 #34, VCDX4, VCDX5, VCAP4-DCA #14, VCAP4-DCD #35, VCAP5-DCD, VCPx4, vEXPERTx4, MCSEx3, MCSAx2, MCP, CCAx2, A+
    boche.net - VMware Virtualization Evangelist
    My advice has no warranties. Follow at your own risk.

    Comment


    • #3
      Re: Group Policy issue

      Thank you for replying, Jasonboche, very much appreciated.

      Yes, I am using the same pc for testing (I know, I should have said that before!)

      GPO is defining user configuration only.

      The only blocked OU belongs to the IT dept.

      I have not applied 'no over-ride' at any location.

      Will run ROSP again and see what it reports.

      Cheers pallie!

      JHH

      Comment


      • #4
        Re: Group Policy issue

        ok

        Ran ROSP on the test user where policy works correctly.

        Everything was a success.

        Then ran ROSP on the other user account, and folder redirection failed.

        Error message was:

        'Folder redirection failed to the error listed below: The system could not find the environment option that was entered'

        Can't understand why two users get different results when they're in the same OU, with the same GPO's, logging on to the same pc.

        Hmmmm.

        Cheers for now

        JHH

        Comment


        • #5
          Re: Group Policy issue

          Hi John.

          You may want to check the event log on the client computer to see if you can get more detailed info on the issue. GPMC makes it easy by having the relevant events in the report.

          You also should check the permissions on the share that the user is being redirected to, making sure the user has the appropriate access.
          Regards,
          Jeremy

          Network Consultant/Engineer
          Baltimore - Washington area and beyond
          www.gma-cpa.com

          Comment


          • #6
            Re: Group Policy issue

            Big THANKS to the guys who responded, most appreciated!!

            JHM

            Comment


            • #7
              Re: Group Policy issue

              NP

              Were you able to solve the problem? If so, how? Others may benefit from your experience.

              Regards,
              Jeremy

              Network Consultant/Engineer
              Baltimore - Washington area and beyond
              www.gma-cpa.com

              Comment

              Working...
              X