Ok, so in the RSOP report, does it show the setting being applied to the user? If not, then the next step is to enable userenv logging and see what it shows when it enumerates the GPOs to process for the user. These kinds of problems typically break down into:
--infrastructure problems (e.g. DNS, FRS, etc. which usually means no GPOs apply) --Configuration problems (e.g. GPO linked wrong, filtered wrong or blocked by some config. error) --Client problems (e.g. Required client services not running, issues with client communicating with DC, etc.) In your case it sounds like either a config. problem or a client problem--probably the latter. One thing to double-check--sometimes a setting gets applied but the client doesn't behave as expected. Look in the system.adm file and determine what registry value should be set for that screen saver policy then confirm on the client that it indeed is not being set. That way you know that it's a problem of not processing the GPO correctly rather than a problem of the policy not responding the way you expect. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel Sent: Monday, September 19, 2005 1:20 PM To: [email protected] Subject: RE: [ActiveDir] only 1 GPO not applying... Hi, I thought that this could be a problem... I added domain users and everyone in the permissions to test things out... still no go. The gpresult message does not report any filtering (except for the computers GPOs that have the users section disabled, but the reason listed is "disabled" which is normal). Still in the dark ... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: September 19, 2005 4:00 PM To: [email protected] Subject: RE: [ActiveDir] only 1 GPO not applying... The filtering message you got from RSOP indicates that either security group filtering or WMI filtering may be getting in the way of this. How have you configured security on that GPO? By default, Authenticated Users (meaning all users and computers in the domain) will process a GPO. So if you removed the Authenticated Users ACE you need to replace that with a user group that contains all the users you wish to receive that GPO. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel Sent: Monday, September 19, 2005 12:46 PM To: [email protected] Subject: RE: [ActiveDir] only 1 GPO not applying... Hi, I found that only computer policies applies ;/ The user only policy do not apply, still searching but will appreciate any inputs. It may be permissions issue, I' looking this way. Thanks! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bruyere, Michel Sent: September 19, 2005 2:04 PM To: [email protected] Subject: [ActiveDir] only 1 GPO not applying... Hi, I have a little problem applying a GPO. SETUP: windows 2k native domain with XPsp2 ADM files. All stations are WinXP sp2. I had a GPO the pushed a screen saver configuration and some other restrictions. I had to split the GPO in 2 because I needed to deploy the Screensaver without the other restrictions. There is a problem woth this new GPO because it just do not apply to any machine/user. I used GMPC on a winXP sp2 with 2k3 adminpak to define and link the GPOs. Note: all other Policies are applied correctly and the one that do not apply isn't listed in the " The following GPOs were not applied because they were filtered out" section... Any ideas? Thanks for your time! List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
