Group Policy is not applied unless a domain user is setup as a local administrator...

[nick.maximovich]

I'm experimenting with a GP that sets up the proxy server settings in
Internet Explorer and noticed it only works if the domain user is setup
as a local administrator. It will not work with the user setup as a
power user. The OS for the desktop is Windows 2000 Pro, the domain is
Win 2003 (upgraded from NT 4.0).

My question is: Under what security context is a Group Policy enforced
onto a desktop/desktop user? Should I be experiencing this or do I
need to troubleshoot this further?

Thanks,

Nick

 

[myweb]

Hello (e-mail address removed),

Log on as a user and run gpresult to verify that the policy is applied correct.
Check the GPO security settings which groups/users are applying the GPO.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[nick.maximovich]

myweb,

Thanks for the reply and guidance. I performed gpresult on the user
account setup as a Power User and again, as a Local Admin. Gpresult
reports an error when the user is setup as a Power User: "The user is a
member of the following security groups: (error)> "Failed to open key
with 2." No further information is given, however, when the user is
setup as a Local Admin, I get a listing of all of the appropriate
security groups the user is a member of.

Again, the policy is applied when the user account is setup as a Local
Administrator. It is not applied when the user account is set as a
Power User. The user account is setup for Read and Apply Group Policy.

I'm wondering if this could be some kind of goofy profile problem,
since I used the Active Directory Migration Tool to transfer the users
from an NT domain to AD. Possible?

I'm going to try this with a new user account and see what happens.

Nick

 

[nick.maximovich]

myweb,

Well, the new user account worked. Now I need to see if my existing
user accounts throughout the domain are hosed and hopefully resolve the
problem through some troubleshooting (and maybe some on-line help).
Thanks again for pointing me in the right direction.

Nick