Announcement

Collapse
No announcement yet.

GP Update issue

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • GP Update issue

    Dear all,

    I have 2 DC (windows 2003 server) & I have implemented some policies in my domain. At client end i have winXP.
    The GP applied at root of the domain but somehow it is not applied to some of the PC's.
    I tried using GPupdate....recreate computer account....but fails...
    any suggestion???

    thanks in advance.
    Regards,

    CoolAndyOnNet | Mumbai | India

  • #2
    Re: GP Update issue

    Check for OUs that block inheritance. GPMC will show this with a blue exclimation point (!).
    If that's not the issue, please post more details i.e. configurations you're wanting to apply; OU hierarchy; etc.
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: GP Update issue

      I have OU's created department vise. I create two GPO's. one is Domain GP Another is IT GP. Domain GP is linked to root domain .I block inheritance at IT department & Link IT GP to IT OU.
      I created one startup script which is applied in both GPO's but some of the PC's it is not working.

      Pls give some steps to in...

      Waiting for reply from AD masters....
      Regards,

      CoolAndyOnNet | Mumbai | India

      Comment


      • #4
        Re: GP Update issue

        Since it's a startup script it needs to be applied to computer. Make sure that the computers are in an OU in which the policy is being applied.

        OUs inherit the group policies from parent OUs, Domain, and Site. The GPO closest to the object takes precedence and overwrites any conflicting settings.
        The precedence order is as follows:
        Child OU (if any)
        OU
        Domain
        Site
        Local

        Since settings overwrite any conflict, using Block Inheritance usually isn't needed and indeed it's a Microsoft best practice not to.

        Another thing that could be affecting this is group policy filtering.

        I would run gpresults on a computer to see if the right GPOs are getting applied. You can post the results here if you need help. You could also use RSoP in logging mode (integrated into the GPMC) for a more intuitive interface.
        Regards,
        Jeremy

        Network Consultant/Engineer
        Baltimore - Washington area and beyond
        www.gma-cpa.com

        Comment


        • #5
          Re: GP Update issue

          I agree that it is better to avoid using GPO blocking. the filtering feature can help most of the time.
          Did you cheack the event logs regarding to the issue?
          GPOs are applied in the following order:
          Local
          Site
          Domain
          OU levels.
          (JeremyW, send me a beer please )
          Regards,
          Csaba Papp
          MCSA+messaging, MCSE, CCNA
          ...............................
          Remember to give credit where credit is due and leave reputation points where appropriate
          .................................

          Comment


          • #6
            Re: GP Update issue

            Here you go
            Originally posted by netxt
            GPOs are applied in the following order:
            Local
            Site
            Domain
            OU levels.
            (JeremyW, send me a beer please )
            But let me just clarify what I wrote:
            The precedence order is as follows:
            Child OU (if any)
            OU
            Domain
            Site
            Local
            You'll notice I put "precedence order" so what I wrote was true in that the last policy applied take precedence. I thought it would be easier for people who are not familiar with how group policy is processed to understand the effects of the GPO hierarchy.

            But yes, in the technical sense, they are applied LSDOU order, each policy overwriting any conflicting settings.
            Regards,
            Jeremy

            Network Consultant/Engineer
            Baltimore - Washington area and beyond
            www.gma-cpa.com

            Comment

            Working...
            X