Is it possible?.........

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

for a group policy to be blocked by group shield? I have set a GP for
security on the domain. It works for a bit and then stops working. It seems
to stop working around the time Group Shield does a scan on the Exchange
server which is also a DC. Is this possible? Any suggestions?
 
Wet,

Pretty sure that it is not possible. The only thing that I can think of
would be that the A/V Software would be using soooo much of the CPU
resources that there is not enough 'umph' for the processing. However, this
is a huge stretch.

And, this is typically not how things work. GPOs are processed when the
computer account object that directly resides in the OU to which the GPO is
linked is restarted ( er, at startup ) or when the user account object that
directly resides in the OU to which the GPO is linked logs off and then back
on. There is the background policy processing that happens every 90 minutes
( +/- 30 minute offset for Member Servers and workstations ). And it
typically happens only to changes in an existing GPO. There are also
certain types of GPOs that are not affected by background processing.
Unless I am remembering this incorrectly. Can someone verify / refute this?

Have you installed the Support Tools on all of your Servers ( Domain
Controllers, Member Servers ) and run dcdiag /c /v and netdiag /v to get a
better idea of what is going on? Did you take a look at repadmin /showreps
and repadmin /showconn ( if you have multiple Domain Controllers in your
environment )? Is everything okay with the SYSVOL?

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
 
Back
Top