1

Active Directoy GPO

view story
linux-howto

http://serverfault.com – I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has a few different administrators over the years. I am looking through the Default Domain group policy and Default Domain Controller group policy. In the security areas and I will use the log on locally area as an example, it shows SIDes that begin with asterisks and are quite long they look sort of like the following *S-1-5-21-787626... Normally, when I see something like this I would think that the User account was no longer there and this was never cleaned up. Am (HowTos)

grtyyu's picture
Submitted by grtyyu on 08/30/2012

Stories similar to Active Directoy GPO

SIDs in Active Directory GPO 37 weeks 3 days ago

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking through the Default Domain group policy and Default Domain Controller group policy.

Whenever I run the Group Policy Result wizard and select a Domain Controller as the target computer, the summary shows BUILTIN\Administrators in the list of "Security Group Membership when Group Policy was applied" under Computer Configuration, as illustrated below:

(Domain, user and computer name left out)

Since Domain Controllers are not a member of Administrators (at least not from what I ca

I have set up a new Windows Server 2008 R2 domain controller, and have attempted to configure the Default Domain Policy to permit all types of passwords.

One Domain user with laptop is gone abroad. I had change some user policy for that Domain User. I have connected his laptop via internet through VPN to my Local Network.

I am getting the following error, when i am trying to update the policy, however i am able to successfully update the computer policy ( please see the print-screen )

" The processing of Group Policy failed.

We have an Active Directory 2003 domain with Windows XP workstations. Many settings on the workstations are configured and locked down via Active Directory domain group policy.

We need to send a few workstations to a remote office that does not have a domain controller or a connection to the domain.

Does anyone have an authoritative source of policies that MUST be set within the Default Domain Policy? Off the top of my head, I know that password policies and certain user session policies must be set within the Default Domain Policy. I'm doing a cleanup of our Domain GPOs and trying to separate any GPs that can be set outside the default...

Currently I'm not able to use the group policy. Error Message: "To manage group policy you must log on to the computer using a domain user account"

There is no domain attached to this windows server. Although I've tried to create a forest but it does not work as well. I do not see the options of ADS in the system.

Am I doing it in wrong way.

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 now) getting these errors in the event logs.

ERRORS Description: The processing of Group Policy failed. Windows could not resolve the user name.

I have a windows server and all the clients are linux based(ubuntu 11.10),i want to set up group/domain policy on my network. please suggest anything other than likewise-open policy. or how to apply group policy in local machine.