Default Domain Controllers Policy

[Guest]

Some of our stations are not getting their group policy. In turn they are
not getting updated by the WSUS server.

When I go into Group Policy Management, there is a blue ! on Domain
Controllers.
We also have several group policies - one for a banner, one for updates,
then for the Data Entry stations we have a lockdown on the desktop.

A couple months ago we had to demote 2 Domain controllers. I looked at the
defualt domain controllers policy & removed the entries for the demoted
domain controllers. The blue ! is still there. Any ideas?

 

[Jorge de Almeida Pinto [MVP]]

the blue ! means that "block inheritance" is configurated on that OU. within
the GPMC you can right click the OU in question and if needed select "block
inheritance" to remove the check and the blue !

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx

 

[Guest]

Thanks!
That worked.
I will see if my stations get the correct policies now.