Mark Minasi's Reader Forum
Mark Minasi's Reader Forum
Home | Profile | Register | Active Topics | Active Polls | Members | Search | FAQ | Minasi Forum RSS Feed
Username:
 Password:
Save Password
Forgot your Password?

 All Forums
 HALP! Questions on Windows and Windows Server
 Remote Desktop Services / Terminal Services
 Orphaned Group Policies?		  New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

anthony
Moderator

USA
2373 Posts
Status: offline
Posted - 05/29/2012 :  2:37:59 PM  Show Profile  Reply with Quote
I have a Terminal Server that appears to have once had some Group Policies applied to it, and it's causing some issues.

I think when we did that emergency domain migration, some Group Policies were not migrated, and now they are orphaned.

We need to edit mail profiles for our users, and when we go to do it, we get the old "This operation cannot be completed due to restrictions in effect on this computer" message.

Even if we try to hit the CPL directly. (almost ANY CPL gets the same message).

Is there a way to figure out which policy is causing this, and turn it off?

Thanks,
anthony

There should be only one World's Greatest Dad shirt. And you should have to kill the previous owner to wear it.

Xenophane
Honorable But Hopeless Addict

Denmark
3070 Posts
Status: offline
Posted - 05/30/2012 :  09:59:59 AM  Show Profile  Visit Xenophane's Homepage  Send Xenophane an ICQ Message  Reply with Quote
Have you tried to run rsop.msc and GPresult ?
Microsoft Powershell MVP

SIG> George Bernard Shaw : The power of accurate observation is commonly called cynicism by those who have not got it. </SIG>

You can read my blog at www.xipher.dk
Go to Top of Page

anthony
Moderator

USA
2373 Posts
Status: offline
Posted - 05/30/2012 :  10:28:27 AM  Show Profile  Reply with Quote
Yes, but it only shows the current GP's being applied. What I'm seeing is the "tatoo" effect where a Group Policy was once applied to the server, so all the registry modifications were set. But when the GP was not moved over to the new domain, there was no policy in place to REVERSE the GPs that had already been applied. So they are still in effect as far as the Terminal Server is concerned since they were never reversed.

So the GP is not being actively applied, I am only seeing the effects of a policy that was applied in the past but never reversed.

I'm not sure I'm even making sense anymore...
Go to Top of Page

Xenophane
Honorable But Hopeless Addict

Denmark
3070 Posts
Status: offline
Posted - 05/31/2012 :  06:17:20 AM  Show Profile  Visit Xenophane's Homepage  Send Xenophane an ICQ Message  Reply with Quote
Well depending on what was set and where, there are simply GPO's that cannot be reversed by the GPO coming out of scope,or does not exist anymore..

So your best bet is to create a new GPO that changes the settings to what you would like them to be.
Microsoft Powershell MVP

SIG> George Bernard Shaw : The power of accurate observation is commonly called cynicism by those who have not got it. </SIG>

You can read my blog at www.xipher.dk
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
Mark Minasi's Reader Forum © 2002-2011 Mark Minasi Go To Top Of Page
This page was generated in 0.14 seconds. Snitz Forums 2000