|
How about setting up auditing on the PDC emulator DC for
the GroupPolicyContainer object that represents that GPO? Then at least you
might be able to see who is making the change. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Schmieder, Marc Sent: Thursday, April 07, 2005 9:56 AM To: [email protected] Subject: RE: [ActiveDir] Extremely Weird Problem First of all we are
seeing this in the lab AND in production. In the lab, we have 2 DC’s in
the root domain and 1 DC in the child domain. There were 2 in the child,
but we removed it to test if that kept the policies from changing. This,
so far, has fixed it, but that isn’t a real resolution for the production
environment. In the Lab root domain, when I make a change, then
version/time are incremented properly. Then I force replication and check
to make sure each DC has the proper version. That works fine. Then 3
minutes later the version on the policy is incremented again by 1 and the
policies have reverted back! Unbelievable isn’t it?
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Adams, Kenneth W
(Ken) That is an extremely
weird problem. You did not explain that you were working on the default
domain controller policy in your highest (only?) domain. I was presuming
that you were working on an OU group policy for the member servers. If
that was the case, the domain policy could override the OU policy if the 'No
override' box was checked. How many domain
controllers do you have in operation within the domain? My next thought is
one of the DCs is not synchronizing properly and is resetting the audit values
and increasing the policy version #. Ken
Adams -----Original
Message----- This isn’t the case in
either situation. The settings are all set to not defined, but the Default
domain controllers policy changes back to a bunch of different settins 5 minutes
after I change it. Also, how could a higher level group policy change a
lower level group policy settings? There are only two policies in the
domain: Default Domain and Default Domain Controllers. On 3 people are domain
admins in the domain and I’m the only one at work. From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Adams, Kenneth W
(Ken) Have you checked for a
higher level GPO that may have these settings configured the way they are
changing back to? My only other thought would be another person with
permission to change the policy is changing it
back. Ken
Adams -----Original
Message----- Has anyone ever seen this? Our
Audit settings in both our lab and production environments are changing
themselves automatically. When we set them to the settings we would like,
the settings actually switch back and increment the version # on the
policy! I’ve been on the phone with Microsoft for hours and hours at this
point and they have never heard/seen this before. The audit settings are
the only setting that seem to change. All others stay the way we set
them. I can give more info if needed. I just want to know if anyone
every heard of this…. Thanks, Marc
Schmieder |
Title: Message
- RE: [ActiveDir] Extremely Weird Problem Darren Mar-Elia
- RE: [ActiveDir] Extremely Weird Problem Fugleberg, David A
- RE: [ActiveDir] Extremely Weird Problem Jorge de Almeida Pinto
