|
First of all we are seeing this in the lab
AND in production. In the lab, we have 2 DC’s in the root domain and 1 DC
in the child domain. There were 2 in the child, but we removed it to test if
that kept the policies from changing. This, so far, has fixed it, but that isn’t
a real resolution for the production environment. In the Lab root domain, when
I make a change, then version/time are incremented properly. Then I force
replication and check to make sure each DC has the proper version. That works
fine. Then 3 minutes later the version on the policy is incremented again by 1
and the policies have reverted back! Unbelievable isn’t it? From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) That is an extremely weird problem.
You did not explain that you were working on the default domain controller
policy in your highest (only?) domain. I was presuming that you were
working on an OU group policy for the member servers. If that was the
case, the domain policy could override the OU policy if the 'No override' box
was checked. How many domain controllers do you have in
operation within the domain? My next thought is one of the DCs is not
synchronizing properly and is resetting the audit values and increasing the
policy version #. Ken
Adams -----Original Message----- This isn’t the case in either
situation. The settings are all set to not defined, but the Default
domain controllers policy changes back to a bunch of different settins 5
minutes after I change it. Also, how could a higher level group policy
change a lower level group policy settings? There are only two policies
in the domain: Default Domain and Default Domain Controllers. On 3 people are
domain admins in the domain and I’m the only one at work. From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adams, Kenneth W (Ken) Have you checked for a higher level GPO
that may have these settings configured the way they are changing back
to? My only other thought would be another person with permission to
change the policy is changing it back. Ken
Adams -----Original Message----- Has anyone ever seen this? Our Audit settings in both
our lab and production environments are changing themselves
automatically. When we set them to the settings we would like, the
settings actually switch back and increment the version # on the policy!
I’ve been on the phone with Microsoft for hours and hours at this point
and they have never heard/seen this before. The audit settings are the
only setting that seem to change. All others stay the way we set
them. I can give more info if needed. I just want to know if anyone
every heard of this…. Thanks, Marc Schmieder |
Title: Message
- RE: [ActiveDir] Extremely Weird Problem Schmieder, Marc
- RE: [ActiveDir] Extremely Weird Problem Darren Mar-Elia
- RE: [ActiveDir] Extremely Weird Problem Fugleberg, David A
- RE: [ActiveDir] Extremely Weird Problem Jorge de Almeida Pinto
