Computer configuration in Group Policy not enforced in Vista

Posted: 10-02-2008, 05:31 PM
I have a Vista and XP machine joined to a domain.
The computer configuration in a group policy is not getting applied
on the Vista machine. But user configuration is applied without any
issues.

I dont see any errors in the group policy eventlog except for
the informational message that the Group policy was filtered out
Default Domain Policy
Denied (Security)

Running gpresult on the Vista machine shows NULL SID listed in
the group membership even though the DC seems to be sending
Domain Computers(515) in the group membership attribute

I also see NULL SID in the registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Group
Policy\GroupMembership

Both user and computer configuration works fine on XP.

Why is NULL SID and not Domain Computers appearing in the group membership
when I run gpresult.
Is there any difference in the way the Group membership is derived in XP and
Vista?

Any information on this issue would be appreciated.

Computer configuration in Group Policy not enforced in Vista


Responses to "Computer configuration in Group Policy not enforced in Vista"

PassPlay
Guest
Posts: n/a
 
RE: Computer configuration in Group Policy not enforced in Vista
Posted: 11-12-2008, 06:49 PM
May be a silly question, but do you have you checked the security settings to
verify that systems have the "Apply GPO" selected

"Krisani" wrote:
> I have a Vista and XP machine joined to a domain.
> The computer configuration in a group policy is not getting applied
> on the Vista machine. But user configuration is applied without any
> issues.
>
> I dont see any errors in the group policy eventlog except for
> the informational message that the Group policy was filtered out
> Default Domain Policy
> Denied (Security)
>
> Running gpresult on the Vista machine shows NULL SID listed in
> the group membership even though the DC seems to be sending
> Domain Computers(515) in the group membership attribute
>
> I also see NULL SID in the registry
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Group
> Policy\GroupMembership
>
> Both user and computer configuration works fine on XP.
>
> Why is NULL SID and not Domain Computers appearing in the group membership
> when I run gpresult.
> Is there any difference in the way the Group membership is derived in XP and
> Vista?
>
> Any information on this issue would be appreciated.
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Group Policy Object Editor on Local Computer Bill MacDonald Windows Vista Performance & Maintenance 0 04-11-2007 11:44 PM
Domain Group Policy - Computer Settings Toothman Windows XP Embedded 1 12-04-2006 06:48 PM
Computer group policy tullanc@hotmail.com Windows XP Embedded 0 06-22-2006 02:42 PM
Group policy for Vista David Sherman Windows Vista 4 03-21-2006 03:42 PM
Messenger & Exchange 2003 & Group Policy Configuration John Whalley Windows XP Messenger 0 09-14-2005 09:19 PM