SBS 2K3 domain GPO's are not applied

A

Adam Butler

Hello,
After setting up a new client with a fresh install of Vista Beta2 and
joining this client to a SBS 2K3 SBS domain, I can't get the client to use
the domain settings or GPO's.

The client logs in fine but GPO's are not applied.

I can do an upgrade install and then the GPO's seem to be applied.

So now my question is, how can I make my SBS box apply the GPO's?

Or actually, how can I make my newly installed Vista client use the domain
GPO's ??
This client logs in fine with the domain but no policies are loaded.

Any Ideas?

Thanks All!
 
K

Kerry Brown

How did you create the computer account? Did you use the SBS wizard or did
you create it manually?
 
K

Kerry Brown

I finally got a chance to try this. Run a cmd prompt as administrator and
look at the results from "gpresult". I wasn't sure if it'd work in Vista.
 
A

Adam Butler

Kerry,

Sorry for the slow reply!
Here is what I get from the gpresult on a Vista machine that has been joined
to my SBS 2K3 domain:


Microsoft Windows [Version 6.0.5384]
(C) Copyright 1985-2005 Microsoft Corp.

C:\Users\Adam.MISSILE>gpresult

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/7/2006 at 0:20:10 AM


RSOP data for MISSILE\Adam on P4-VISTA : Logging Mode
------------------------------------------------------------

OS Type: Microsoftr Windows VistaT Ultimate
OS Configuration: Member Workstation
OS Version: 6.0.5384
Site Name: Default-First-Site-Name
Roaming Profile: N/A
Local Profile: C:\Users\Adam.MISSILE
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=P4-VISTA,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=missile,DC=lo
cal
Last time Group Policy was applied: 7/7/2006 at 0:18:51 AM
Group Policy was applied from: wx98.missile.local
Group Policy slow link threshold: 500 kbps
Domain Name: MISSILE
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Small Business Server Domain Password Policy
Default Domain Policy
Rename Administrator Account
Local Group Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
P4-VISTA$
Domain Computers
System Mandatory Level
System Mandatory Level


USER SETTINGS
--------------
CN=adam,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=missile,DC=local
Last time Group Policy was applied: 7/7/2006 at 0:19:05 AM
Group Policy was applied from: wx98.missile.local
Group Policy slow link threshold: 500 kbps
Domain Name: MISSILE
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Client Computer
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

Rename Administrator Account
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Domain Password Policy
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
Offer Remote Assistance Helpers
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Group Policy Creator Owners
Domain Admins
Schema Admins
Enterprise Admins
SBS Report Users
SBS Mobile Users
Offer Remote Assistance Helpers
High Mandatory Level
High Mandatory Level

C:\Users\Adam.MISSILE>
 
K

Kerry Brown

You'd have to run it on a Vista computer where the group policies work and
compare the results.

--
Kerry Brown
MS-MVP - Windows Shell/User
www.VistaHelp.ca



Adam Butler said:
Kerry,

Sorry for the slow reply!
Here is what I get from the gpresult on a Vista machine that has been
joined to my SBS 2K3 domain:


Microsoft Windows [Version 6.0.5384]
(C) Copyright 1985-2005 Microsoft Corp.

C:\Users\Adam.MISSILE>gpresult

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/7/2006 at 0:20:10 AM


RSOP data for MISSILE\Adam on P4-VISTA : Logging Mode
------------------------------------------------------------

OS Type: Microsoftr Windows VistaT Ultimate
OS Configuration: Member Workstation
OS Version: 6.0.5384
Site Name: Default-First-Site-Name
Roaming Profile: N/A
Local Profile: C:\Users\Adam.MISSILE
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=P4-VISTA,OU=SBSComputers,OU=Computers,OU=MyBusiness,DC=missile,DC=lo
cal
Last time Group Policy was applied: 7/7/2006 at 0:18:51 AM
Group Policy was applied from: wx98.missile.local
Group Policy slow link threshold: 500 kbps
Domain Name: MISSILE
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Client Computer
Small Business Server Remote Assistance Policy
Small Business Server Lockout Policy
Small Business Server Domain Password Policy
Default Domain Policy
Rename Administrator Account
Local Group Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

The computer is a part of the following security groups
-------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
This Organization
P4-VISTA$
Domain Computers
System Mandatory Level
System Mandatory Level


USER SETTINGS
--------------
CN=adam,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=missile,DC=local
Last time Group Policy was applied: 7/7/2006 at 0:19:05 AM
Group Policy was applied from: wx98.missile.local
Group Policy slow link threshold: 500 kbps
Domain Name: MISSILE
Domain Type: Windows 2000

Applied Group Policy Objects
-----------------------------
Small Business Server Client Computer
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Small Business Server Remote Assistance Policy
Filtering: Disabled (GPO)

Rename Administrator Account
Filtering: Not Applied (Empty)

Small Business Server Internet Connection Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PreSP2

Small Business Server Lockout Policy
Filtering: Disabled (GPO)

Small Business Server Domain Password Policy
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Small Business Server Windows Firewall
Filtering: Denied (WMI Filter)
WMI Filter: PostSP2

The user is a part of the following security groups
---------------------------------------------------
Domain Users
Everyone
Offer Remote Assistance Helpers
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
This Organization
LOCAL
Group Policy Creator Owners
Domain Admins
Schema Admins
Enterprise Admins
SBS Report Users
SBS Mobile Users
Offer Remote Assistance Helpers
High Mandatory Level
High Mandatory Level

C:\Users\Adam.MISSILE>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top