Newbie, Help Please!

  • Thread starter Thread starter Magus
  • Start date Start date
M

Magus

I am trying to set a policy for one user group on 2000
server. I have created the group, added a new group
policy and selected the new user group as the only group
to apply the policy to, moved the new policy to the top
of the list and enabled no overwrite.

When a user in that group logs on to a workstation, the
policy is not used. As I have never set up a server
before, I am probably missing something, but I have
looked through the web site and the local help files and
cannot find out what it is.

Could anybody help with this obviously simple problem?

Detailed replies if possible.

Tx

Magus
 
it contains user and computer settings and is applied to
the domain I think. I have set it on the main system
icon in the AD users. As I said, I am new to this and am
not sure if this is even the right place to put it.

Magus
 
Magus,

GPO's apply only if your user or computer objects are in OU to which you set
the policy, or if they inherit the policy from parent OU's, or domain or a
site.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000)
(e-mail address removed)
http://ladava.com
 
I am assuming here that the workstation is a 2000 or XP as any other down
level client will not obtain a group policy. Download the gpresult.exe on
our public web site and run it on the workstation.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/default.asp

Run the utility for a command prompt with the syntax of gpresult /s and pipe
it to a text file and post it.


--
Mark Ramey [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions.
Please use these newsgroups
 
Workstation running XP Pro

GP Result as follows:
Microsoft (R) Windows (R) 2000 Operating System Group
Policy Result tool
Copyright (C) Microsoft Corp. 1981-1999


Created on Monday, July 07, 2003 at 1:51:40 AM


Operating System Information:

Operating System Type: Professional
Operating System Version: 5.1.2600.Service Pack 1
Terminal Server Mode: Not supported

##########################################################
#####

User Group Policy results for:

CN=Cyber4,CN=Users,DC=cybercafe,DC=local

Domain Name: CYBERCAFE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: \\kings-server\netshare\cyber4
Local profile: C:\Documents and Settings\cyber4

The user is a member of the following security groups:

CYBERCAFE\Domain Users
\Everyone
BUILTIN\Users
\LOCAL
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users

The user has the following security privileges:

Bypass traverse checking
Shut down the system
Remove computer from docking station


##########################################################
#####

Last time Group Policy was applied: Monday, July 07, 2003
at 1:50:05 AM
Group Policy was applied from: KINGS-
SERVER.cybercafe.local



##########################################################
#####

Computer Group Policy results for:

CN=CYBER1,CN=Computers,DC=cybercafe,DC=local

Domain Name: CYBERCAFE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security
groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
CYBERCAFE\CYBER1$
CYBERCAFE\Domain Computers
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users

##########################################################
#####

Last time Group Policy was applied: Monday, July 07, 2003
at 1:45:40 AM
Group Policy was applied from: KINGS-
SERVER.cybercafe.local


==========================================================
=====


The computer received "Registry" settings from these GPOs:

Default Domain Policy
Revision Number: 3 (Active Directory) 3
(Sysvol)
Unique Name: {31B2F340-016D-11D2-945F-
00C04FB984F9}
Domain Name: cybercafe.local
Linked to: Domain
(DC=cybercafe,DC=local)

CafeUsers
Revision Number: 2 (Active Directory) 2
(Sysvol)
Unique Name: {A0CF88A7-83D6-4E4A-935A-
B18618E78906}
Domain Name: cybercafe.local
Linked to: Domain
(DC=cybercafe,DC=local)




The following settings were applied from: Default
Domain Policy

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
ValueName: EFSBlob
ValueType: REG_BINARY
Value:

01 00 01 00 01 00 00 00 77 02 00 00
73 02 00 00 ........w...s...
1c 00 00 00 02 00 00 00 3b 02 00 00
38 00 00 00 ........;...8...
00 00 00 00 00 00 00 00 01 05 00 00
00 00 00 05 ................
15 00 00 00 d4 6f 84 95 90 5f 76 d9
5e 53 3c 8b .....o..._v.^S<.
f4 01 00 00 30 82 02 37 30 82 01 a4
a0 03 02 01 ....0..70.......
02 02 10 f4 8d d2 e7 60 2b 50 91 41
fd bb 93 19 .......`+P.A....
21 86 e4 30 09 06 05 2b 0e 03 02 1d
05 00 30 50 !..0...+......0P
31 16 30 14 06 03 55 04 03 13 0d 41
64 6d 69 6e 1.0...U....Admin
69 73 74 72 61 74 6f 72 31 0c 30 0a
06 03 55 04 istrator1.0...U.
07 13 03 45 46 53 31 28 30 26 06 03
55 04 0b 13 ...EFS1(0&..U...
1f 45 46 53 20 46 69 6c 65 20 45 6e
63 72 79 70 .EFS.File.Encryp
74 69 6f 6e 20 43 65 72 74 69 66 69
63 61 74 65 tion.Certificate
30 1e 17 0d 30 33 30 32 30 36 31 36
31 39 35 33 0...030206161953
5a 17 0d 30 36 30 32 30 35 31 36 31
39 35 33 5a Z..060205161953Z
30 50 31 16 30 14 06 03 55 04 03 13
0d 41 64 6d 0P1.0...U....Adm
69 6e 69 73 74 72 61 74 6f 72 31 0c
30 0a 06 03 inistrator1.0...
55 04 07 13 03 45 46 53 31 28 30 26
06 03 55 04 U....EFS1(0&..U.
0b 13 1f 45 46 53 20 46 69 6c 65 20
45 6e 63 72 ...EFS.File.Encr
79 70 74 69 6f 6e 20 43 65 72 74 69
66 69 63 61 yption.Certifica
74 65 30 81 9f 30 0d 06 09 2a 86 48
86 f7 0d 01 te0..0...*.H....
01 01 05 00 03 81 8d 00 30 81 89 02
81 81 00 a0 ........0.......
d2 0f 05 ff 8d f5 e9 58 a7 99 65 4f
47 d2 e5 3b .......X..eOG..;
43 a9 16 65 b8 9e 6c 6c 8c cf c8 2d
3a cd 07 90 C..e..ll...-:...
2a 47 40 a4 be 6a eb 70 ac 9d 4d 02
d1 88 38 18 *[email protected].
7b d0 70 c0 96 49 6d 3c 7b 9e 85 74
c3 a0 7d 08 {.p..Im<{..t..}.
27 ed 02 f2 b1 d0 10 87 b9 32 fa c4
0f b6 c1 ef '........2......
91 08 93 9d 68 e6 c0 e4 52 f7 49 d0
59 0a 30 dd ....h...R.I.Y.0.
6d b4 be b5 fb c1 bd 0e ba c0 b6 19
80 11 6b ab m.............k.
a6 7c 8f 9d 3b 0b 8e 42 1d 32 b6 97
cf 3f 89 02 .|..;..B.2...?..
03 01 00 01 a3 1a 30 18 30 16 06 03
55 1d 25 04 ......0.0...U.%.
0f 30 0d 06 0b 2b 06 01 04 01 82 37
0a 03 04 01 .0...+.....7....
30 09 06 05 2b 0e 03 02 1d 05 00 03
81 81 00 00 0...+...........
28 0e 98 bc 76 2e 95 48 35 41 c5 29
64 d8 5f 98 (...v..H5A.)d._.
f2 78 f8 28 81 15 49 bc 1d a5 2f d3
58 11 7c 81 .x.(..I.../.X.|.
28 5b 75 2f 50 48 d7 4c 9a 24 45 44
30 c2 6d 18 ([u/PH.L.$ED0.m.
f8 c6 70 86 2e 25 51 19 47 3f 54 bc
34 07 d0 ec ..p..%Q.G?T.4...
aa 35 c7 84 c0 39 b6 32 b7 69 3d 5c
18 00 d4 fe .5...9.2.i=\....
97 5a 41 62 15 88 32 dd 96 34 f3 5d
c6 02 63 96 .ZAb..2..4.]..c.
ad ee d6 7f c3 f4 fa 6d 52 52 89 b8
3e c0 83 d6 .......mRR..>...
35 4f 81 5c fa bd 27 56 1c a1 2c df
dd de ad 00 5O.\..'V..,.....


KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\Certificates\993A3C3F19A36FF73A497C662667081C9BC495AF
ValueName: Blob
ValueType: REG_BINARY
Value:

03 00 00 00 01 00 00 00 14 00 00 00
99 3a 3c 3f .............:<?
19 a3 6f f7 3a 49 7c 66 26 67 08 1c
9b c4 95 af ..o.:I|f&g......
02 00 00 00 01 00 00 00 c4 00 00 00
1c 00 00 00 ................
6c 00 00 00 01 00 00 00 00 00 00 00
00 00 00 00 l...............
00 00 00 00 01 00 00 00 65 00 64 00
61 00 33 00 ........e.d.a.3.
63 00 34 00 64 00 65 00 2d 00 33 00
63 00 39 00 c.4.d.e.-.3.c.9.
65 00 2d 00 34 00 36 00 61 00 30 00
2d 00 39 00 e.-.4.6.a.0.-.9.
64 00 39 00 31 00 2d 00 61 00 33 00
32 00 35 00 d.9.1.-.a.3.2.5.
62 00 32 00 36 00 35 00 30 00 30 00
33 00 31 00 b.2.6.5.0.0.3.1.
00 00 00 00 00 00 00 00 4d 00 69 00
63 00 72 00 ........M.i.c.r.
6f 00 73 00 6f 00 66 00 74 00 20 00
42 00 61 00 o.s.o.f.t...B.a.
73 00 65 00 20 00 43 00 72 00 79 00
70 00 74 00 s.e...C.r.y.p.t.
6f 00 67 00 72 00 61 00 70 00 68 00
69 00 63 00 o.g.r.a.p.h.i.c.
20 00 50 00 72 00 6f 00 76 00 69 00
64 00 65 00 ..P.r.o.v.i.d.e.
72 00 20 00 76 00 31 00 2e 00 30 00
00 00 00 00 r...v.1...0.....
20 00 00 00 01 00 00 00 3b 02 00 00
30 82 02 37 ........;...0..7
30 82 01 a4 a0 03 02 01 02 02 10 f4
8d d2 e7 60 0..............`
2b 50 91 41 fd bb 93 19 21 86 e4 30
09 06 05 2b +P.A....!..0...+
0e 03 02 1d 05 00 30 50 31 16 30 14
06 03 55 04 ......0P1.0...U.
03 13 0d 41 64 6d 69 6e 69 73 74 72
61 74 6f 72 ...Administrator
31 0c 30 0a 06 03 55 04 07 13 03 45
46 53 31 28 1.0...U....EFS1(
30 26 06 03 55 04 0b 13 1f 45 46 53
20 46 69 6c 0&..U....EFS.Fil
65 20 45 6e 63 72 79 70 74 69 6f 6e
20 43 65 72 e.Encryption.Cer
74 69 66 69 63 61 74 65 30 1e 17 0d
30 33 30 32 tificate0...0302
30 36 31 36 31 39 35 33 5a 17 0d 30
36 30 32 30 06161953Z..06020
35 31 36 31 39 35 33 5a 30 50 31 16
30 14 06 03 5161953Z0P1.0...
55 04 03 13 0d 41 64 6d 69 6e 69 73
74 72 61 74 U....Administrat
6f 72 31 0c 30 0a 06 03 55 04 07 13
03 45 46 53 or1.0...U....EFS
31 28 30 26 06 03 55 04 0b 13 1f 45
46 53 20 46 1(0&..U....EFS.F
69 6c 65 20 45 6e 63 72 79 70 74 69
6f 6e 20 43 ile.Encryption.C
65 72 74 69 66 69 63 61 74 65 30 81
9f 30 0d 06 ertificate0..0..
09 2a 86 48 86 f7 0d 01 01 01 05 00
03 81 8d 00 .*.H............
30 81 89 02 81 81 00 a0 d2 0f 05 ff
8d f5 e9 58 0..............X
a7 99 65 4f 47 d2 e5 3b 43 a9 16 65
b8 9e 6c 6c ..eOG..;C..e..ll
8c cf c8 2d 3a cd 07 90 2a 47 40 a4
be 6a eb 70 ...-:...*[email protected]
ac 9d 4d 02 d1 88 38 18 7b d0 70 c0
96 49 6d 3c ..M...8.{.p..Im<
7b 9e 85 74 c3 a0 7d 08 27 ed 02 f2
b1 d0 10 87 {..t..}.'.......
b9 32 fa c4 0f b6 c1 ef 91 08 93 9d
68 e6 c0 e4 .2..........h...
52 f7 49 d0 59 0a 30 dd 6d b4 be b5
fb c1 bd 0e R.I.Y.0.m.......
ba c0 b6 19 80 11 6b ab a6 7c 8f 9d
3b 0b 8e 42 ......k..|..;..B
1d 32 b6 97 cf 3f 89 02 03 01 00 01
a3 1a 30 18 .2...?........0.
30 16 06 03 55 1d 25 04 0f 30 0d 06
0b 2b 06 01 0...U.%..0...+..
04 01 82 37 0a 03 04 01 30 09 06 05
2b 0e 03 02 ...7....0...+...
1d 05 00 03 81 81 00 00 28 0e 98 bc
76 2e 95 48 ........(...v..H
35 41 c5 29 64 d8 5f 98 f2 78 f8 28
81 15 49 bc 5A.)d._..x.(..I.
1d a5 2f d3 58 11 7c 81 28 5b 75 2f
50 48 d7 4c ../.X.|.([u/PH.L
9a 24 45 44 30 c2 6d 18 f8 c6 70 86
2e 25 51 19 .$ED0.m...p..%Q.
47 3f 54 bc 34 07 d0 ec aa 35 c7 84
c0 39 b6 32 G?T.4....5...9.2
b7 69 3d 5c 18 00 d4 fe 97 5a 41 62
15 88 32 dd .i=\.....ZAb..2.
96 34 f3 5d c6 02 63 96 ad ee d6 7f
c3 f4 fa 6d .4.]..c........m
52 52 89 b8 3e c0 83 d6 35 4f 81 5c
fa bd 27 56 RR..>...5O.\..'V
1c a1 2c df dd de ad
00 ..,.....


KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\CRLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName:
Software\Policies\Microsoft\SystemCertificates\EFS
\CTLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values


The following settings were applied from:
CafeUsers

KeyName:
Software\Policies\Microsoft\Windows\CurrentVersion
\Internet Settings
ValueName: Security_options_edit
ValueType: REG_DWORD
Value: 0x00000001


==========================================================
=====
The computer received "Security" settings from these GPOs:

Default Domain Policy
Revision Number: 3 (Active Directory) 3
(Sysvol)
Unique Name: {31B2F340-016D-11D2-945F-
00C04FB984F9}
Domain Name: CYBERCAFE.LOCAL
Linked to: Domain
(DC=cybercafe,DC=local)


Run the Security Configuration Editor for more
information.


==========================================================
=====
The computer received "EFS recovery" settings from these
GPOs:

Default Domain Policy
Revision Number: 3 (Active Directory) 3
(Sysvol)
Unique Name: {31B2F340-016D-11D2-945F-
00C04FB984F9}
Domain Name: CYBERCAFE.LOCAL
Linked to: Domain
(DC=cybercafe,DC=local)


Additional information is not available for this
type of policy setting.


The CafeUsers group policy is the one that doesn't seem
to do anything. I have only set it to stop acces to the
internet property sheets as yet in order to test it but
they are still available. I also want to try and remove
the users from the default domain users group, but I
can't seem to remove that either, It tells me that I
don't need to.

Any help appreciated.

Tx

Magus
 
Back
Top