Gpo Object Only Works, If It Is Direkt In The Domain-Root

W

wiseguy

New member
Joined
Apr 28, 2010
Messages
2
Hallo,

I created an object in GPOs of a Windows 2008 R2 server, named "Testsomething". I set in this object a registry String in HKLM\Software\MyTest (only for testing)

Now i add this object to my OU where my testuser is in. When I run gpupdate /force now with this user, the registry string is not changed/set how ever. So looked in the output from gpresult and there I can see, that my object is not used:
"Abgelehnte (rejected) Gruppenrichtlinienobjekte":
Name: Testsomething
Verknpfungsstandort (location): mydomain.de/SpecialUsers
Grund (reason) abgelehnt (rejected): Leer (empty)

But when i put the Object directly in Domain Root (mydomain.de) than it works fine.

But why is that so?
 
In GP management check the security of that policy, it must be granted to be applied in some cases. Also run a resultant group policy and post results.
 
Back
Top