Retention Policy using GPO

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Once I have configured a GPO how do I enure this is distributed to all users
- do I do this at the server end (in which case should I be reading the Group
Policy snap in chm) or do I need to have something installed at workstation
level? I have set the Scope to include [domainName].local and the Security
Filters setting is Users. Am I missing something?
 
Where's the edit button :-(
Should have said workstations are all Win2K - not sure if this is going to
have any impact.
 
Hmmm, maybe - that site states that "Note that the settings are enforced to
all users of that computer even the administrator! As an administrator you
can of course change settings through the MMC when required" which suggests
that the GPO is configured from a client computer in this instance rather
than from a server. This then leads me to ask do I need to import these
settings from the server onto client machines? If this is the case how do I
do that - this seems to be the missing information gap in my research.
 
Ideally, you'll manage them completely from Active Directory Users & Computers on the domain controller, without ever visiting the client machines.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003

and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
Indeed, this is what I'm trying but failing to do. I'm pretty certain that I
have managed to configure the GPO correctly according to all the
documentation that I have read. What I seem to be failing to do is have this
GPO apply itself to client machines. I dont know what processes I need to
follow to do this nor can I find any information that details past the level
of configuring the GPO. I assume it is not 'majik' but I cant find any help
on how to push this policy out to users.

I appreciate the help you have given so far.
 
Are the users logging into your WIndows domain? What object in AD did you use to create the policy on? Group Policy, amazingly, doesn’t apply to security groups. It applies only to the user or computer accounts in the Site, Domain or OU. So, you’ll need to move the user’s account into the OU where the GPO is linked. Log back in as the user, and you’re in business. (from http://www.gpanswers.com/faq/)

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003

and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
Yes that is amazing! Thanks so much, I'm endebted to you. I'll post back
once I 've had the chance to digest / research / test this.
 
Thanks for the link, I'm still slogging away with this. I went back to
basics with this - I created a new OU and a new test account within the an
Users OU within this OU and created a new GPO on that OU. Still no go.
gpresult /v /u shows that policies were applied but this just is not
happening :-( I can push it through on a CMW file rather than a group policy
but this brings us right back to having to implement it at the local machine
level. While this is not too bad here, we are a reasonably small enterprise,
it is still not ideal. Anyone else got any ideas?
 
Dumb questions maybe, but did you actually set the policies that you want to operate on that OU? In the Security tab for that GPO, is the desired group set to Apply Group Policy = Allow?

Are you working on WIndows 2000 Server or Windows 2003?
 
I have a read and Apply Group policy settings for Authenticated users. This
is 2003 server but win 2k Client. When you say security tab do you mean
Delegation | Advanced | Security?

Dumb questions maybe, but did you actually set the policies that you want to
operate on that OU? In the Security tab for that GPO, is the desired group
set to Apply Group Policy = Allow?

Are you working on WIndows 2000 Server or Windows 2003?
 
For information I have run RSoP on both this user and the OU I created and
in these queries the outlook retention policies are applied. Shame about
the real world ;-)
 
That's encouraging. Maybe a dumb question but where on the client are you looking to see whether the policies are applied? I've never known RSoP to be inaccurate.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003

and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
No such thing as dumb questions. I have looked in the mail client (outlook
2003) inbox properties AutoArchive and also in the client properties
Tools|Options then Other|Autoarchive. As previously stated I did also run
gpresult /v to check which policies had been run.
That's encouraging. Maybe a dumb question but where on the client are you
looking to see whether the policies are applied? I've never known RSoP to be
inaccurate.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003

and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
To clarify when I look at this setting it states "The Network Administrator
has not set Retention Policies" so this leads me to belive that this has not
been set.
 
I would actually start by looking in the registry on the user's machine under HKCU\Software\Policies.

--
Sue Mosher, Outlook MVP
Author of Configuring Microsoft Outlook 2003

and Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
Ok done that - nothing is set there. I assume that is what gpresult reads in
any case (?) to produce its report. Most perturbing.
 
Back
Top