Bad boy Warrior Posted March 9, 2005 Share Posted March 9, 2005 I setup a policy (in GPO) where everytime the user tries to close the application it gives the error that the user doesnt have permission - Which policy is causing this as i dont want to start another gpo againthanks everybody Link to comment Share on other sites More sharing options...
I_Broke_My_MHZ Posted March 9, 2005 Share Posted March 9, 2005 Is this a local security policy or a policy applied in advanced directory? Link to comment Share on other sites More sharing options...
Spyder2k Posted March 10, 2005 Share Posted March 10, 2005 Are you sure it's policy and not just the process being run under the 'SYSTEM' account and the user being limited, i.e. Service Link to comment Share on other sites More sharing options...
valter Posted March 10, 2005 Share Posted March 10, 2005 Even though I didn't offer a solution, I must ask, did you modify Default Domain Policy, or you just made your own?The best way to control the policy behavior (takes time as well) it to make a new gpo, set a single rule in that gpo, set the gpo to no override, and once you're sure it doesn't cause any problems, then apply it in YOUR OWN policy withiun target container. Default Domain Policy SHOULD NOT be modified at all, so you have a solution to go back at all time. Link to comment Share on other sites More sharing options...
Bad boy Warrior Posted March 10, 2005 Author Share Posted March 10, 2005 Is this a local security policy or a policy applied in advanced directory? I set up a user then created an OU and applied GPOs to that OU and placed the user in the OU B) Are you sure it's policy and not just the process being run under the 'SYSTEM' account and the user being limited, i.e. Service I would think its the way i created the GPO as this problem only happens when i place the user under the OU i createdEven though I didn't offer a solution, I must ask, did you modify Default Domain Policy, or you just made your own?The best way to control the policy behavior (takes time as well) it to make a new gpo, set a single rule in that gpo, set the gpo to no override, and once you're sure it doesn't cause any problems, then apply it in YOUR OWN policy withiun target container. Default Domain Policy SHOULD NOT be modified at all, so you have a solution to go back at all time. No i havent modified the Default Domain Policy i created my own.What does the "No Override" function doThanks guys Link to comment Share on other sites More sharing options...
valter Posted March 11, 2005 Share Posted March 11, 2005 Bad boy Warrior,Mar 10 2005, 03:26 AMNo i havent modified the Default Domain Policy i created my own.What does the "No Override" function doThanks guysIt prevents conflicts between gpos ... policy that is on the top is to mandatory one, should you create your own, you of course place it under the top one, but if a single setting is Not Configured in the top gpo and Enabled in your gpo, then final setting will be Not Configured ... no override prevents these things from happening Link to comment Share on other sites More sharing options...
wullieb1 Posted March 15, 2005 Share Posted March 15, 2005 Go to Microsoft and download a copy of Group Policy Management Console, its free.It is for 2003 server but will work on 2000.This will help you drill down to where the fault occurs Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now