GPO only apply to domain, not to OU's

  • Thread starter Thread starter Brian Nielsen
  • Start date Start date
B

Brian Nielsen

Hi,

I am experiencing this weird problem. I am having an AD like the following:

domain.dk
-All Users OU
-IT OU
-Accounting OU

and so on

If I apply a GPO to domain.dk it is applied to all the users. If I move the
GPO to All Users OU or another OU the GPO is NOT applied !!!!

There is no "No override" set on the domain.dk level.
There is no "Block" set on the All Users Level
The correct securitygroups at set on all levels.

Why is this happening? Do you have any ideas?

I hope you can help me.

Regards

Brian Heilmann / Sysadmin
 
inline

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

Brian Nielsen said:
Hi,

I am experiencing this weird problem. I am having an AD like the following:

domain.dk
-All Users OU
-IT OU
-Accounting OU

and so on

If I apply a GPO to domain.dk it is applied to all the users. If I move the
GPO to All Users OU or another OU the GPO is NOT applied !!!!

There is no "No override" set on the domain.dk level.
There is no "Block" set on the All Users Level
The correct securitygroups at set on all levels.
Click to expand...
[Christoffer Andersson] what do you mean with "The correct securitygroups
at set on all levels." ? if you have modify the ACL of the GPO make sure the
particular user och gorup with users have at least Read and Apply Policy
 
A userenv.log file will help to show what is occurring when the policy
applies. It almost sounds like permissions on the OU's may not be correct
for the reading of the GPLink attribute.

221833 How to Enable User Environment Debug Logging in Retail Builds of
Windows
http://support.microsoft.com/?id=221833

250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842


--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top