I have inherited an existing Win2k domain and I am having big problems
getting group policy to apply to my users and I believe it stems from an
authentication issue. Group Policy is not applying to any of my domain user
accounts. However, if I make that user a member of the Domain Admin group,
the policy will then apply to them. Not only that, but I can then remove the
user from the Domain Admin group, and the policy will still apply.
I've been using GPMC to work with policy settings and using the group policy
results wizard to try and help me make sense of the problem and it shows
another example of the problem I'm having. If I log in with a basic user with
normal user rights, and then I run the GP results wizard using my admin accnt
and point the wizard to my PC and then try and select that basic user to see
the results of its policy settings, it doesn't show up on the list of users
to run the wizard on. But again, if I make that user a member of Domain
admins first, log them in, and then remove the domain admin right, that user
then shows up in the list with the group policy applied properly.Also this is
a domain wide issued effecting all my normal users. When I run the GP results
wizard on these user's computer and user accnts, in the Policy Events tab,
all of them are getting EventID:1053 Windows cannot determine the user or
computer name (the specifed user does not exist). Group policy processing
aborted. These users are able to see the \\mydomain\SYSVOL\mydomain files so
that isn't it, any help on this issue would be much appreciated.
|
Similar Threads
