GPO only apply to domain, not to OU's

B

Brian Nielsen

Hi,

I am experiencing this weird problem. I am having an AD like the following:

domain.dk
-All Users OU
-IT OU
-Accounting OU

and so on

If I apply a GPO to domain.dk it is applied to all the users. If I move the
GPO to All Users OU or another OU the GPO is NOT applied !!!!

There is no "No override" set on the domain.dk level.
There is no "Block" set on the All Users Level
The correct securitygroups at set on all levels.

Why is this happening? Do you have any ideas?

I hope you can help me.

Regards

Brian Heilmann / Sysadmin
 
C

Chriss3

inline

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

Brian Nielsen said:
Hi,

I am experiencing this weird problem. I am having an AD like the following:

domain.dk
-All Users OU
-IT OU
-Accounting OU

and so on

If I apply a GPO to domain.dk it is applied to all the users. If I move the
GPO to All Users OU or another OU the GPO is NOT applied !!!!

There is no "No override" set on the domain.dk level.
There is no "Block" set on the All Users Level
The correct securitygroups at set on all levels.
[Christoffer Andersson] what do you mean with "The correct securitygroups
at set on all levels." ? if you have modify the ACL of the GPO make sure the
particular user och gorup with users have at least Read and Apply Policy
 
G

Gary Mudgett [MSFT]

A userenv.log file will help to show what is occurring when the policy
applies. It almost sounds like permissions on the OU's may not be correct
for the reading of the GPLink attribute.

221833 How to Enable User Environment Debug Logging in Retail Builds of
Windows
http://support.microsoft.com/?id=221833

250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842


--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top