Bad boy Warrior Posted March 9, 2005 Posted March 9, 2005 I setup a policy (in GPO) where everytime the user tries to close the application it gives the error that the user doesnt have permission - Which policy is causing this as i dont want to start another gpo againthanks everybody
I_Broke_My_MHZ Posted March 9, 2005 Posted March 9, 2005 Is this a local security policy or a policy applied in advanced directory?
Spyder2k Posted March 10, 2005 Posted March 10, 2005 Are you sure it's policy and not just the process being run under the 'SYSTEM' account and the user being limited, i.e. Service
valter Posted March 10, 2005 Posted March 10, 2005 Even though I didn't offer a solution, I must ask, did you modify Default Domain Policy, or you just made your own?The best way to control the policy behavior (takes time as well) it to make a new gpo, set a single rule in that gpo, set the gpo to no override, and once you're sure it doesn't cause any problems, then apply it in YOUR OWN policy withiun target container. Default Domain Policy SHOULD NOT be modified at all, so you have a solution to go back at all time.
Bad boy Warrior Posted March 10, 2005 Author Posted March 10, 2005 Is this a local security policy or a policy applied in advanced directory? I set up a user then created an OU and applied GPOs to that OU and placed the user in the OU B) Are you sure it's policy and not just the process being run under the 'SYSTEM' account and the user being limited, i.e. Service I would think its the way i created the GPO as this problem only happens when i place the user under the OU i createdEven though I didn't offer a solution, I must ask, did you modify Default Domain Policy, or you just made your own?The best way to control the policy behavior (takes time as well) it to make a new gpo, set a single rule in that gpo, set the gpo to no override, and once you're sure it doesn't cause any problems, then apply it in YOUR OWN policy withiun target container. Default Domain Policy SHOULD NOT be modified at all, so you have a solution to go back at all time. No i havent modified the Default Domain Policy i created my own.What does the "No Override" function doThanks guys
valter Posted March 11, 2005 Posted March 11, 2005 Bad boy Warrior,Mar 10 2005, 03:26 AMNo i havent modified the Default Domain Policy i created my own.What does the "No Override" function doThanks guysIt prevents conflicts between gpos ... policy that is on the top is to mandatory one, should you create your own, you of course place it under the top one, but if a single setting is Not Configured in the top gpo and Enabled in your gpo, then final setting will be Not Configured ... no override prevents these things from happening
wullieb1 Posted March 15, 2005 Posted March 15, 2005 Go to Microsoft and download a copy of Group Policy Management Console, its free.It is for 2003 server but will work on 2000.This will help you drill down to where the fault occurs
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now