Group Policy Not Applying Unless User is Part of Administrators Group

  • Thread starter Thread starter octavian32
  • Start date Start date
O

octavian32

I would appreciate any ideas anyone may have.

The only way I can get a GPO to populate is to grant administrator
rights to the user. If I don't, the policy does not apply. All the
policy is supposed to do is configure proxy settings for Internet
Explorer. However, the problem gets trickier: The problem only occurs
on the current image we are deploying. If I install Windows 2000 from
scratch on a PC, the GPO will come through with no problems (and I will
not need to grant the user admin. rights!). I need to find what is
causing the problem on the current image.
If helpful, I can include a copy of the UserEnv.log file.

Thank you in advance for any help / ideas anyone may have.

Cheers!
 
Thanks for the reply.
I did use the gpresult.exe tool. There is no difference when I run the
tool as the user with admin rights and without admin. rights. I even
ran a file compare utility on it. The only mismatch was in the
security privileges section. (that's obvious, because when the user
has admin. rights, he has more privileges).
 
Have you modify the ACL (Security) of the particular GPO? Ensure that
Authenticated Users has been granted the rights Read and Apply Policy.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
I checked the GPO and it does have the appropriate rights.
The problem is that if I install Windows 2000 from scratch, the GPO
will apply correctly (and I will not have to grant the user admin.
rights). However, in our current build, the only way to apply the GPO
is to grant the user administrator rights. I can not reimage 3000 PCs
with a new image, therefore I have to troubleshoot what is causing the
problem on the current image. Thank you for your help, it is much
appreciated.
 
Run rsop.msc on new install, as well run it on a imaged computer, and
compare the result?

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
Can you run it on a Windows 2000 PC?
I tried downloading it but I could not install it on a W2k PC.
 
Is it possible that the GPO is applying but failing to successfully set
the proxy registry settings? Try adding a policy setting in the GPO
that you can confirm, like hiding a cpanel applet, to verify whether
the GPO is processed at all.

If the GPO if being processed, check the permissions of the registry
key for Internet settings.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\

An alternative might be to just use reg entries in your GPO to push the
values into the registry directly, rather than using the settings in
the GPO template.
 
Sorry, gpresult is your only option at win2k platform, it gives you the same
output but in text mode.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup
 
Back
Top