GPO issue
-
I have a user who is in the Faculty OU but is part of the library group as well. The Faculty GPO works fine but the library GPO does not.
I have checked everything based on this thread at
but nothing sticks out.I can \\SERVER\SharedDrive to the shared location.
-
@WLS-ITGuy I know it might not be enough info but didn't want to take screenshots and give too much info
-
Yeah, no idea where to start with the info given
-
Here is the properties of the GPO mapped drive
-
Have you checked your "resultant" situation to see if that one is even applied?
-
Have you run "gpresult /h gpo.html" from a command prompt on the pc that is suffering and looked through the results? It may provide some info that will help.
-
@scottalanmiller said in GPO issue:
Have you checked your "resultant" situation to see if that one is even applied?
It isn't being applied.
-
-
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
-
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
-
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
Hmmm. Not hitting the client machine.
-
@WLS-ITGuy said in GPO issue:
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
Hmmm. Not hitting the client machine.
There you go
-
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
Hmmm. Not hitting the client machine.
There you go
I kind of knew that part but If I only knew why... -
@WLS-ITGuy said in GPO issue:
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
Hmmm. Not hitting the client machine.
Meaning it's not listed when you run
gpresult /r(orgpresult /r /scope:computer), or it's listed but not being applied? -
So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission? -
@EddieJennings said in GPO issue:
@WLS-ITGuy said in GPO issue:
@scottalanmiller said in GPO issue:
@WLS-ITGuy said in GPO issue:
@WLS-ITGuy said in GPO issue:
It isn't being applied.
How many Domain Controllers?
2 - Checked both and both show the correct GPO
Check from a client machine, though, too.
Hmmm. Not hitting the client machine.
Meaning it's not listed when you run
gpresult /r(orgpresult /r /scope:computer), or it's listed but not being applied?gpresult shows the Faculty GPO as being applied but not the Library GPO
-
So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?Not sure if I understand your questions exactly, I'll post some screenshots when I get back in the office.
-
So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?List of GPOs:
GPOs in the OU:
-
@WLS-ITGuy Library GPO v2 was a start fresh GPO to test if it was something with the way I did the first GPO but nothing has changed. Security Filtering is set to Authenticated Users.
The Faculty GPO is set the same way as the Library GPO with Security Filtering. And the two mapped drives attach just fine.
-
@WLS-ITGuy said in GPO issue:
So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?Not sure if I understand your questions exactly, I'll post some screenshots when I get back in the office.
That question is due to the topic discussed here: https://blogs.technet.microsoft.com/askds/2016/06/22/deploying-group-policy-security-update-ms16-072-kb3163622/
It sounds like you don't actually have things set up that way though so probably not the problem.
@WLS-ITGuy said in GPO issue:
So the library GPO is linked somewhere above this user's OU and is using security filtering to apply to the library security group only?
Have Domain Computers been given read permission?List of GPOs:
GPOs in the OU:
OK so the user is in the WLS-Faculty group. The two GPOs there will apply. It sounds like that is happening as expected.
You say the user is a member of the library group but I don't see you mention where that group lives in the AD structure. Is the library group in the WLS-Library OU?
