Announcement

Collapse
No announcement yet.

GPO not being applied to WinXP workstation.

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • GPO not being applied to WinXP workstation.

    I have a workstation "RX_SPARE01" on which my GPO is not applying for some reason. The computer is WinXP SP2.

    The computer is located in the AD at:

    JLRXMELB.NET > John's & Lyng Restorx > Computers > Misc Computers > Test Computers

    One particular GPO is called "Set default browser page title- Oakleigh" which sets the browser's title. This is setup as a User Config\Windows Settings\Internet Explorer Maintenance\Browser User Interface/Customized Title Bar and is applied to the same OU as the computer above.

    Each time I log into RX_SPARE01, the browser title does NOT change. I ran a GP Modeling Query which showed the policy as applyable with the correct settings for that OU.

    I ran GPRESULT and got the following results:
    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 13/07/2006 at 3:14:52 PM



    RSOP results for JLRXMELB\Console on RX_SPARE01 : Logging Mode
    ---------------------------------------------------------------

    OS Type: Microsoft Windows XP Professional
    OS Configuration: Member Workstation
    OS Version: 5.1.2600
    Domain Name: JLRXMELB
    Domain Type: Windows 2000
    Site Name: Oakleigh
    Roaming Profile:
    Local Profile: C:\Documents and Settings\console.JLRXMELB.000
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
    CN=RX_SPARE01,OU=Test Computers,OU=Misc Computers,OU=Computers,OU=John's & Lyng Restorx,DC=jlrxmelb,DC=net
    Last time Group Policy was applied: 13/07/2006 at 3:14:04 PM
    Group Policy was applied from: jlrx01.jlrxmelb.net
    Group Policy slow link threshold: 500 kbps

    Applied Group Policy Objects
    -----------------------------
    Set default browser page title- Oakleigh
    IE browser Setting
    WSUS Policy
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Local Group Policy
    Filtering: Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
    BUILTIN\Administrators
    Everyone
    BUILTIN\Users
    NT AUTHORITY\NETWORK
    NT AUTHORITY\Authenticated Users
    RX_SPARE01$
    Domain Computers


    USER SETTINGS
    --------------
    CN=Administrator,CN=Users,DC=jlrxmelb,DC=net
    Last time Group Policy was applied: 13/07/2006 at 3:14:04 PM
    Group Policy was applied from: jlrx01.jlrxmelb.net
    Group Policy slow link threshold: 500 kbps

    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Local Group Policy
    Filtering: Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Users
    BUILTIN\Administrators
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    LOCAL
    Domain Admins
    WWW
    Group Policy Creator Owners
    ISA_GFICS
    Enterprise Admins
    Schema Admins
    SiteServer Commerce Operators
    SiteServer DirectMail Administrators
    MTS Impersonators
    SiteServer Publishing Operators
    SiteServer Administrators
    SiteServer DirectMail Operators
    SiteServer Analysis Administrators
    SiteServer Ad Manager Administrators
    GRPTMMicrosoft
    SiteServer Knowledge Administrators
    Sophos SBE Administrators
    SiteServer Publishing Administrators
    GRPAUOMicrosoft
    SiteServer Search Administrators
    EMLibrary Users
    SiteServer Membership Administrators
    SiteServer Directory Administrators
    PMExportAllowedGroup
    Sophos Console Administrators
    DC is Win2003 Server SP1

    Interestingly, the GPO has settings in the USER Config section. From GPRESULT above, the GPO was applied to "COMPUTER SETTINGS" but not to "USER SETTINGS". This would explain why the GPO does not affect the computer. But why was it not applied?

    It looks like the onlu USER settings applied are from the Default Domain Policy. GP Modeling query shows the following:
    User Configuration Summaryhide
    Generalshow
    User container jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers
    Domain jlrxmelb.net
    Slowlink processing No
    Loopback processing No

    Group Policy Objectshide
    Applied GPOshide
    Name Link Location Revision
    Default Domain Policy jlrxmelb.net AD (5), Sysvol (5)
    IE browser Setting jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers AD (47), Sysvol (47)
    Set default browser page title- Oakleigh jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers AD (20), Sysvol (20)

    Denied GPOshide
    Name Link Location Reason Denied
    WSUS Policy jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers Empty
    ..which shows that it SHOULD have been applied. So what is stopping it from being applied when GPRESULT is not showing it as even being attempted?
    |
    +-- JDMils
    |
    +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
    |

  • #2
    Re: GPO not being applied to WinXP workstation.

    Sorry, I just did a GP Results wizard and got the following:
    I have a workstation "RX_SPARE01" on which my GPO is not applying for some reason. The computer is WinXP SP2.

    The computer is located in the AD at:

    JLRXMELB.NET > John's & Lyng Restorx > Computers > Misc Computers > Test Computers

    One particular GPO is called "Set default browser page title- Oakleigh" which sets the browser's title. This is setup as a User Config\Windows Settings\Internet Explorer Maintenance\Browser User Interface/Customized Title Bar and is applied to the same OU as the computer above.

    Each time I log into RX_SPARE01, the browser title does NOT change. I ran a GP Modeling Query which showed the policy as applyable with the correct settings for that OU.

    I ran GPRESULT and got the following results:
    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 13/07/2006 at 3:14:52 PM



    RSOP results for JLRXMELB\Console on RX_SPARE01 : Logging Mode
    ---------------------------------------------------------------

    OS Type: Microsoft Windows XP Professional
    OS Configuration: Member Workstation
    OS Version: 5.1.2600
    Domain Name: JLRXMELB
    Domain Type: Windows 2000
    Site Name: Oakleigh
    Roaming Profile:
    Local Profile: C:\Documents and Settings\console.JLRXMELB.000
    Connected over a slow link?: No


    COMPUTER SETTINGS
    ------------------
    CN=RX_SPARE01,OU=Test Computers,OU=Misc Computers,OU=Computers,OU=John's & Lyng Restorx,DC=jlrxmelb,DC=net
    Last time Group Policy was applied: 13/07/2006 at 3:14:04 PM
    Group Policy was applied from: jlrx01.jlrxmelb.net
    Group Policy slow link threshold: 500 kbps

    Applied Group Policy Objects
    -----------------------------
    Set default browser page title- Oakleigh
    IE browser Setting
    WSUS Policy
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Local Group Policy
    Filtering: Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
    BUILTIN\Administrators
    Everyone
    BUILTIN\Users
    NT AUTHORITY\NETWORK
    NT AUTHORITY\Authenticated Users
    RX_SPARE01$
    Domain Computers


    USER SETTINGS
    --------------
    CN=Administrator,CN=Users,DC=jlrxmelb,DC=net
    Last time Group Policy was applied: 13/07/2006 at 3:14:04 PM
    Group Policy was applied from: jlrx01.jlrxmelb.net
    Group Policy slow link threshold: 500 kbps

    Applied Group Policy Objects
    -----------------------------
    Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
    Local Group Policy
    Filtering: Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
    Domain Users
    Everyone
    BUILTIN\Users
    BUILTIN\Administrators
    NT AUTHORITY\INTERACTIVE
    NT AUTHORITY\Authenticated Users
    LOCAL
    Domain Admins
    WWW
    Group Policy Creator Owners
    ISA_GFICS
    Enterprise Admins
    Schema Admins
    SiteServer Commerce Operators
    SiteServer DirectMail Administrators
    MTS Impersonators
    SiteServer Publishing Operators
    SiteServer Administrators
    SiteServer DirectMail Operators
    SiteServer Analysis Administrators
    SiteServer Ad Manager Administrators
    GRPTMMicrosoft
    SiteServer Knowledge Administrators
    Sophos SBE Administrators
    SiteServer Publishing Administrators
    GRPAUOMicrosoft
    SiteServer Search Administrators
    EMLibrary Users
    SiteServer Membership Administrators
    SiteServer Directory Administrators
    PMExportAllowedGroup
    Sophos Console Administrators
    DC is Win2003 Server SP1

    Interestingly, the GPO has settings in the USER Config section. From GPRESULT above, the GPO was applied to "COMPUTER SETTINGS" but not to "USER SETTINGS". This would explain why the GPO does not affect the computer. But why was it not applied?

    It looks like the onlu USER settings applied are from the Default Domain Policy. GP Modeling query shows the following:
    User Configuration Summaryhide
    Generalshow
    User container jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers
    Domain jlrxmelb.net
    Slowlink processing No
    Loopback processing No

    Group Policy Objectshide
    Applied GPOshide
    Name Link Location Revision
    Default Domain Policy jlrxmelb.net AD (5), Sysvol (5)
    IE browser Setting jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers AD (47), Sysvol (47)
    Set default browser page title- Oakleigh jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers AD (20), Sysvol (20)

    Denied GPOshide
    Name Link Location Reason Denied
    WSUS Policy jlrxmelb.net/John's & Lyng Restorx/Computers/Misc Computers/Test Computers Empty
    ..which shows that it SHOULD have been applied. So what is stopping it from being applied when GPRESULT is not showing it as even being attempted?
    Is the Computer Settings Component Status causing the problem?
    |
    +-- JDMils
    |
    +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
    |

    Comment


    • #3
      Re: GPO not being applied to WinXP workstation.

      Are the GPOs you want applied linked to an OU (or on one higher up in the hierarchy) that contains the user you're using? If so, check for blocked inheritance. **EDIT** If not, you need to put the user in an OU that has the GPO linked to it**EDIT**
      GPMC does a nice job of laying things out so you can see your settings.
      Last edited by JeremyW; 13th July 2006, 13:28.
      Regards,
      Jeremy

      Network Consultant/Engineer
      Baltimore - Washington area and beyond
      www.gma-cpa.com

      Comment


      • #4
        Re: GPO not being applied to WinXP workstation.

        Thanks Jeremy. With your help I realised I was applying GPOs with USER settings against a Computer OU. Works now........
        |
        +-- JDMils
        |
        +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
        |

        Comment


        • #5
          Re: GPO not being applied to WinXP workstation.

          Just had to register for these forums so I could post a massive thank you !!!

          I'd been trying to apply user settings to a computer OU aswell and had been at it for 2 days checking rsop.msc gpresult and running gpupdate /force a billion times lol


          Thank you so much !

          Comment


          • #6
            Re: GPO not being applied to WinXP workstation.

            Glad to help!
            Regards,
            Jeremy

            Network Consultant/Engineer
            Baltimore - Washington area and beyond
            www.gma-cpa.com

            Comment

            Working...
            X