Weird Prob

[Ian McCulloch]

Hi gang - I really need some help. I hope someone out there is in a
troubleshooting/patient mood.

Win 2k SP4 domain. All win2k servers/workstations (2-3 WinXP)

2 GP's - default domain & and on one OU called Citrix (I have all my Citrix
servers in this OU) On the Citrix OU, I have loopback processing enabled so
when a user logs on to the Citrix server - they only get that GPO. When
they are on the LAN on a Win2k Pro box, they should get the default domain
policy

Now the prob. I use Default Domain policy GP to push out websites to
everyone (incl Citrix users). 2 out of the last 4 days, these websites are
not available. I have to replicate the URL's from the default domain policy
to the Citrix policy. When I do, I get all the URL's replicate twice. I
then remove the policy setting from the Citrix GP and the Default Domain
starts working again.

What should I be looking for in order to get this thing working
consistently?

Please advise

Ian

 

[Derek Melber [MVP]]

What do you mean when you say "I have to replicate the URL's from the
default domain policy
to the Citrix policy. When I do, I get all the URL's replicate twice. "?

 

[Ian McCulloch]

I have to enable the exact same URL policy in the Citrix GPO (duplicate all
the settings i.e. the websites I want to push out) So I have to update the
URL sites in two areas instead of the one Default Domain Policy...

 

[Derek Melber [MVP]]

Ian,

There is no need to do that. With the way that GPOs work, the settings from
the domain will affect all users/computers in the entire domain, unless you
filter them out (which is not by default). So, if you set up the URLs at the
domain, it will just be applied automatically to all objects.

The only time you need to worry about duplicating settings in a GPO (domain
and OU linked) is when the settings differ. GPO settings append to one
another until a setting conflicts, then the last one to apply will win. GPOs
apply LSDOU (local-site-domain-OU).

 

[Ian McCulloch]

I catch it

The OU is winning out - I thought the domain was

Thanks Derek