GPO not applied - migration from ldap to AD

[Guest]

hey,

on 1/18/2006 i already posted the following in the group policy section, but
i got no replies... in short: i manually migrated a win xp pro computer from
a win 2K domain (completely out of my hands) in my new domain (first in
workgroup than to new domain), everything's fine (logon, scripts, shared
folders) except that the GPO from the new domain is not applied!

now, i recently found out that the source domain doesn't use AD, but some
old LDAP. With that in mind, does anyone have any idea if there are some
catches here when migrating from LDAP to AD or why my GPO are not applied?
things to check for?

thanx already.
Steven.

-----------
here's the first post:

i've put a windows XP professional from an old domain to a new one.
scripts run fine, AD seems OK. Except the gpo i designed for the OU the pc
is in, doesn't get applied.
if i check in "help&support center - tools to view computer info - advanced
system info - view group policy settings applied" i can't find the name of
the GPO i designed. All settings (from the previous & highly secured domain -
out of my hands btw) are assigned to the local GPO.
Can't install the gpmc since it's a dutch Xp and for one of the patches
needed, there is no dutch version!
Gpupdate/force doesn't help either. tried resetting the pc account in AD to
no avail.

any ideas on how to reset these local settings or to force the new GPO.
Maybe some auth problem, althuogh scripts run fine (so all domain
communication seems OK)

please let me know.
greetz,
Steven.

 

[Guest]

A couple of things to check:

If this is a machine gpo, is the xp machine in the same ou as where the gpo
is being applied?
If this is a user gpo, is the user account in the same ou as where the gpo
is being applied?

Does the user or machine have the read and apply policy permission?

There is no Windows Directory Service other than AD. AD uses LDAP for its
Directory Services, so you are confused on its old ldap -vs- AD.

Have you run gpresult when you are logged onto the machine in question.
Have you Resultant Set Of Policy (MMC Snap-In) against the machine to see
what is or isn't being applied?

 

[Guest]

hey paul,

thanx a bunch!!! feel a bit stupid, it was a user GPO defined on a OU with
only the computer account. I logged on as administrator but to no avail.
Just created a new user in the computer OU and the GPO (after gpupdate)
works fine now.

out of curiosity (learn as much as i can) can you just specify what you
meant by

Does the user or machine have the read and apply policy permission?

Where do i look for that?

thanx man, made my day!
Steven.

 

[Guest]

Bring up Group Policy - Select the Properties button - Security tab

You will find the ACL's for users. In order to provide the gpo you need the
permissions read and apply.

http://support.microsoft.com/?kbid=322176

 

[Guest]

OK, just the security tab... thanx for following up!

Steven.