GPO inaccessible - under denied

-

hello there,
i've been having trouble gpos while , forth working not-working. here scenario.
two sites:
a. colo_site
b. local_site

domain controllers:
1. dc_local_site
2. dc_colo_site

computer :

1. ts1 (located in colo_site)

ou: terminal_servers (ts1 member of ou)

ou : local_site ( users member of ou)

i linking 2 gpos to  terminal_servers ou
1. std_users
2. pwr_users
both configured loop back
removed authenticated users , for;
std_users filtered std_users group
pwr_users filtered pwr_users group

initially had trouble getting work. went through forums , managed work. though cannot pin point problem , not reproduce issue.
then lost gpo setting again. went through same steps including ntfrs utility force replication. along troubleshooting after 1 reboot started work. time not revert not-working state.

it worked fine 10 days. , lost settings again.

when ran resultant wizard: indicates inaccessible under denied section.

i need find out causing loose settings instead going through troubleshooting went through before, not able pin point issue or not reproduce (revert not-working state)

i seeking gpo experts.
thanks in advace.
dhanish

 

hi,

could please event log here ?

troubleshooting group policy problems
http://technet.microsoft.com/en-us/library/cc787386(ws.10).aspx

[]`s

 

thiago pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org


Windows Server  >  Group Policy



Comments

Post a Comment

Popular posts from this blog

Global Catalog ?

-
greetings! we have set 2008 r2 x64 server in our company. -we promote server dc -we add ad roles -we have transfered fsmo roles on server -we have add dns role on server question: server going our primary dc, cause old 1 eventualy going shut down completely. must still export , import dhcp new server. problem/question global catalog. have 1 forest, 2 domains. in primary domain 3 dc's (this new server 1 of them), , in child domain have 2 dc's. -is wrong if new server holds global catalog? read somewhere fsmo roles , global catalog together, not recommended? -would wrong if every dc in our company global catalog? with best regards, bostjan bostjanc you have 2 domains. need 1 schema master , 1 domain naming master in forest. recommended these roles reside on dc's in root domain, not required. need 1 pdc emulator, rid master, , infrastructure master each domain. in case, in both of your domains, either dc's should gc's, or infrastructure ma...
Read more

mailing list

-
how create mailing list see article "creating mail merge data source” at: http://www.word.mvps.org/faqs/mailmerge/createadatasource.htm  -- hope helps. doug robbins - word mvp, dkr[atsymbol]mvps[dot]org posted via community bridge "mailing list" wrote in message news:25d6abcb-1717-4ec8-9587-860696c38f53@communitybridge.codeplex.com... how create mailing list doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions
Read more

Global Catalog

-
why recommended microsoft have global catalog in domain controller? why message import infrastructure master role in case not install global catalog in secondary dc? you can read here. https://technet.microsoft.com/en-us/library/cc737269(v=ws.10).aspx  in single-domain forest, configure domain controllers global catalog servers. because every domain controller stores domain directory partition in forest, configuring each domain controller global catalog server not require additional disk space usage, cpu usage, or replication traffic. in single-domain forest, domain controllers act "virtual global catalog servers" in can respond authentication or service request. special condition single-domain forests design (authentication requests not require contacting global catalog server, when there multiple domains , user can member of universal group exists in different domain). however, domain controllers designated global catalog servers can respond global catalog...
Read more