GPO not applying

Xez · 9 Sep 2009 at 11:06

Have another problem im afraid!

Basically we have a domain which two different companys exist.

We have a GPO for Company A which is 001 and Company B which is 012.

We have a website that uses ID's for different sites so that it partly fills in a form and checks back to AD to see if that e-mail address exists in 012 users.

For 001 the GPO is applied as a site and 012 is applied to users.

This pushes out a desktop icon and a favourites for an IE shortcut to this web page.

The problem is that only 001 site policey is applying and 012 is not over writing this when the 012 users log in to the system. If i remove 001 GPO all is fine with 012.

The 001 computers and 012 computers are in the same OU would this be the problem? I've read upon loopback processing but i can't find out how to enable it in Server 2008 :confused:

tried the guides on Microsft and it's just not the same!

Help would be appriciated

BlueMhz · 13 Sep 2009 at 12:17

Is the 001 policy enforced? is the 012 policy enforced?

To determine which policies are being applied on a computer, from a DOS prompt run: gpupdate /Z

This will output a list of all GPOs that are applied and which ones have precedence.

Xez · 13 Sep 2009 at 15:13

It says that both policies are applied! The 001 site has precedence and then the user policy after that. I have got it working now by making 012 delete the file that is applied by 001, and then create a new one which seems to have worked perfectly.

Thanks!

BlueMhz · 13 Sep 2009 at 15:53

Glad you got it all working!

A little strange though... were both 001 and 012 GPOs set to run a script to create these desktop icons and favorites? if so, then it explains why the 001 script runs first (site level) and then the 012 script (OU level). Though GPOs aren't really meant as a method of controlling script processing order.