I believe Justin asked the question because the gpresult output shows the LAN Policy twice in various places. This is unusual, e.g
************ Computer Received "Registry" Settings from these GPOs: Local Group Policy LAN Policy LAN Policy ************ Without knowing more about your environment I would guess that you already had a policy called LAN Policy, and that after you renamed your Default Domain Policy you now have two policies with the same name. The original LAN Policy probably has conflicting settings to the Default Domain Policy and has higher priority (and is thus winning). This would indicate that the original LAN Policy is either linked at the OU level or is linked at the domain level (and is higher in the list than the original Default Domain Policy). Don't worry about about the Local Policy - it is never going to win in a conflict with any of the Group Policies coming from AD. As I suggested before, rename the LAN Policy back to the Default Domain Policy. Run gpresult again and see if you still see a LAN Policy in the results. If so, look for the policy linked at either the domain or OU level. If your clients are XP you might get more information from by running the RSoP snap-in. An even better option would to run the GPMC - this will give you far more information about the policies you have and where they are linked. Although the GPMC only runs on either Windows Server 2003 or XP (with .NET Framework installed), you can use it to manage policies running in a Windows 2000 AD environment. Tony ---------- Original Message ---------------------------------- From: "Charles Campbell" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jul 2003 14:26:48 -0400 No. Only one policy, and when I check under properties (AD/Servername/Properties/Group Policy) only LAN policy is listed. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Wednesday, July 30, 2003 11:27 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] GP overridden Do you have two different LAN Policys? -----Original Message----- From: Charles Campbell [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2003 9:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] GP overridden The event log shows: "Security policy in the Group policy objects are applied successfully." According to GPResult: Group Policy applied Wed, July 30, 2003 at 9:23:37 AM Group Policy was applied from xxxx.xxxx.com (names changed to protect the innocent) Computer Received "Registry" Settings from these GPOs: Local Group Policy LAN Policy LAN Policy Computer Received "Security" settings from these GPOs: Local Group Policy LAN Policy Default Domain Controllers Policy LAN Policy Computer received "EFS recovery" settings from these GPOs: Local Group Policy LAN Policy LAN Policy I guess what's confusing me here is why "Local Group Policy" is being applied, and where, exactly is it? Under AD, in the xxxx.com properties box/Group Policy, I only have LAN Policy listed. Charles -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tony Murray Sent: Wednesday, July 30, 2003 09:14 To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] GP overridden Charles A couple of points here. 1. Group Policy is refreshed on Domain Controllers every five minutes by default. The default refresh cycle is every 90 minutes on client computers. If the event log entries you mention occur on a DC this may be perfectly normal. What are the details of the event? 2. It is not a good idea to mess with the Default Domain Policy, or for that matter the Default Domain Controllers Policy. I would recommend that you change the name back to what it was. 3. The use of "No Override" can cause confusion and should be used sparingly. Policies are applied in the order Site - Domain - OU ...but in the event of conflict the policy that was last applied takes priority. For example if you have conflicting settings in domain and OU policies the OU policy setting will win. The GPRESULT tool is quite useful for detecting which policies have been applied. Tony ---------- Original Message ---------------------------------- From: "Charles Campbell" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jul 2003 08:47:53 -0400 For some reason, there is a GP being applied on the server every 5 minutes (according to the Event Viewer). In AD, I changed the name of the "Default Group Policy" to be "LAN policy" and check-marked "No Over-Ride". Where would I look to see what is being applied? It's changing all the settings that I have set under "LAN policy" (i.e. IE branding, custom url links, etc). Thanks. Charles List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
