Policy not being applied to users

I have a group policy that used to work, but now has decided it does not want to be applied to the workstations anymore. I don't know what may have happened to make is stop working.
It's a pretty restrictive policy for students. I have the exact same policy for two other groups of students that still work. All three policies were copied from the same set of files. In other words, I make a change to one, then copy the files to the other two because they reside on different servers. Yes, I do open each one in C1 to update the timestamp.
When I run wmsched, the policy is there in the list, but the settings are not applied. I can log in to the PC with one of the other student accounts and their policy is applied.
The login I'm using to test with has R rights to the policy location - the same rights that the other users have to their policies. I have also tried more rights with no different results.
The DLU part of the policy runs, and I have turned off the windows firewall. I have also created a brand new policy from scratch to rule out any corruption in the old policy and I get the same results.
Apparantly, my workstation policy for this group is not being applied either. The other two groups' policies apply like they are supposed to. So this means that neither policy assigned to this group of students/workstations is working.
Any ideas?
Thanks

FishEggStew,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Similar Messages

I can't determine how a group policy is being applied. Please help. Thank you.

Hi,
I'm having a problem trying to find how a particular policy is being applied on my domain (I've inherited this domain). When ever a user logs into a domain, the computer get's a new local group policy. One particular attribute is that the local
admin account get's renamed:
I can't figure out where it's coming from. I've run gpresult, and I'm assuming it's the default domain policy.
But when I go to the domain controller and look at the default domain policy, the entry is empty:
I'm really at a loss. However, I really don't think it's the default domain policy, but I can't figure out what else it could be?
Any help would be greatly appreciated. Thanks!!! -Tim

Does this help
C:\Users\***>gpresult /z
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 2/12/2015 at 1:57:06 PM
RSOP data for ****\*** on H9MHD12 : Logging Mode
OS Configuration:            Member Workstation
OS Version:                  6.1.7601
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\***
Connected over a slow link?: No
COMPUTER SETTINGS
    CN=H9MHD12,CN=Computers,DC=***,DC=com
    Last time Group Policy was applied: 2/12/2015 at 1:03:12 PM
    Group Policy was applied from:      ***.***.Com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        ****
    Domain Type:                        Windows 2000
    Applied Group Policy Objects
        Default Domain Policy
        Local Group Policy
    The computer is a part of the following security groups
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        H9MHD12$
        Domain Computers
        System Mandatory Level
    Resultant Set Of Policies for Computer
        Software Installations
            N/A
        Startup Scripts
            N/A
        Shutdown Scripts
            N/A
        Account Policies
            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting: 42
            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting: N/A
            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting: N/A
            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting: 1
            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting: N/A
        Audit Policy
            N/A
        User Rights
            N/A
        Security Options
            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            NewAdministratorName
                Computer Setting: Enabled
            N/A
        Event Log Settings
            N/A
        Restricted Groups
            N/A
        System Services
            N/A
        Registry Settings
            N/A
        File System Settings
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\ScPnp\EnableScP
nP
                Value:       0, 0, 0, 0
                State:       Enabled
USER SETTINGS
    CN=*******,OU=Users,OU=Corporate,OU=***,DC=***,DC=com
    Last time Group Policy was applied: 2/12/2015 at 1:33:14 PM
    Group Policy was applied from:      ***.***.Com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        ***
    Domain Type:                        Windows 2000
    Applied Group Policy Objects
        Default Domain Policy
    The following GPOs were not applied because they were filtered out
        Local Group Policy
            Filtering: Not Applied (Empty)
    The user is a part of the following security groups
        Domain Users
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
    The user has the following security privileges
        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Increase a process working set
    Resultant Set Of Policies for User
        Software Installations
            N/A
        Logon Scripts
            N/A
        Logoff Scripts
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            N/A
        Folder Redirection
            N/A
        Internet Explorer Browser User Interface
            N/A
        Internet Explorer Connection
            N/A
        Internet Explorer URLs
            N/A
        Internet Explorer Security
            N/A
        Internet Explorer Programs
            N/A

Data are not being applied at destination side

Hi all,
I have implemented real time streams replication(not archive log based downstream replication).
source:9.2.0.8.0
destination:10.2.0.2.0
Capture and propagation is working fine. DBlinks are also fine. Apply process is running , but data are not being applied in destination side.
The trc file shows this:
Dump file /dev1/visdb10/10.2.0/admin/VIS_wbsebdev1/bdump/vis_p001_14628.trc
Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Production
With the Partitioning, OLAP and Data Mining options
ORACLE_HOME = /dev1/visdb10/10.2.0
System name: Linux
Node name: wbsebdev1
Release: 2.4.21-32.ELsmp
Version: #1 SMP Fri Apr 15 21:17:59 EDT 2005
Machine: i686
Instance name: VIS
Redo thread mounted by this instance: 1
Oracle process number: 21
Unix process pid: 14628, image: oracle@wbsebdev1 (P001)
*** SERVICE NAME:(SYS$USERS) 2008-05-29 11:39:26.957
*** SESSION ID:(388.16) 2008-05-29 11:39:26.957
The Alertlog file shows at the end this:
Thu May 29 11:19:06 2008
Streams APPLY A001 with pid=16, OS id=9531 stopped
Thu May 29 11:21:25 2008
Incremental checkpoint up to RBA [0x746.d359.0], current log tail at RBA [0x746.d471.0]
Thu May 29 11:39:26 2008
Streams APPLY A001 started with pid=18, OS id=14624
Streams Apply Reader started P000 with pid=20 OS id=14626
Streams Apply Server started P001 with pid=21 OS id=14628
Thu May 29 11:41:33 2008
Incremental checkpoint up to RBA [0x746.11565.0], current log tail at RBA [0x746.121b9.0]
Pls help.
Thanking You,
Nitesh.

Problem solved.

Preventing Domain Group Policy from being applied

How can a user prevent the domain group policy from being applied to his machine? And How can I stop users from doing that?

Hi,
No, group policy is processed by order, that is, local GPO is processed first, and then domain policy is processed by order, which would overwrite settings in the earlier GPOs if there are conflict.
If you don’t want to apply the domain policy, apply a higher precedence policy or disjoin the domain.
Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
Alex Zhao
TechNet Community Support

Security constraints not being applied after using custom login module

I am using form based authentication and I applied the custom login module - DBProcLoginModule to work with the embedded OC4J (JDeveloper 10.1.3.2). I have specified two security contraints in web.xml. The authentication is working correctly, however the security contraints are not being applied. All users are able to access all url resources. The security constraints were working properly before applying the custom login module. Pls help.
Leena

Hi,
if "All users are able to access all url resources" then this indicates that the RL isn't properly protected. If the authorization would fail then noone would have access and you would see error code 401
Make sure the role names in web.xml are the same as added by the LoginModule. Also make sure you set the dynamic.role property and the custom security provider property in the orion-application.xml
<jazn provider="XML">
<property name="custom.loginmodule.provider" value="true"/>
<property name="role.mapping.dynamic" value="true"/>
</jazn>
Note that the above is not required (because done automatically) if the custom LoginModule configuration is deployed through the orion-application.xml file
Frank

Null offset from calibration not being applied to output

I am measuring some load cells using a I 9237. I am setting the null offset using Device > Bridge Calibration in the DAQ Assistant. I measure the offet and hit calibrate. It says "Calibration successful" and I hit finish, but the offset value is not applied to the data.
How do I get this to work?

Hello IamRubber,
How can you see the calibration not being applied? Are you running the same DAQ Assistant to see the offset? If possible, please attach a screenshot from before/after running bridge calibration.
Patrick W.
Applications Engineer
National Instruments

Rules in Mail not being applied after Mavericks update

Hi everyone, I know there are a lot of threads already discussing similar issues, but so far I've been unable to find one that helps resolve my particular issue. Ever since upgrading to Mavericks my rules are not being applied in Mail. I will give you a screenshot of one of my rules:
I have about five rules that follow the same pattern: search for particular string in the FROM field and mark it with a color if the string is present. These rules all worked fine in Snow Leopard. All of my rules are still present after the upgrade and all checked as active. When I "select all" messages in my inbox and press Option-Cmd-L the rules are applied properly. However, the rules are not applying themselves when new mail comes in. As far as I can tell this does not have anything to do with the mail not being recognizes “as a new message” like, for example, because the mail was already read on my phone. It happens even if my other devices are offline and the only thing I am using to check mail is my laptop.
I am using a MacBook Pro 2.3 GHz Intel Core Duo with OS X 10.9.1, in case that matters.
Thanks for any advice!

I think I've found at least a partial solution to the Mail - Rules Don't Work problem:
In "Mail" go to the menu Mailbox and click on Rebuild.
If you have a lot of stuff, this will take several minutes to finish.
I also reviewed all my rules and made a few minor changes.
Mixed results: I found that running "Apply Rules" didn't work on email already received; but new mail did. I don't quite understand that, but I call it a partial success.

[svn:osmf:] 14871: Fixing anchoring 'right' and 'bottom' properties not being applied on items that don't have a width/ height and position set.

Revision: 14871
Revision: 14871
Author:   [email protected]
Date:     2010-03-19 01:05:54 -0700 (Fri, 19 Mar 2010)
Log Message:
Fixing anchoring 'right' and 'bottom' properties not being applied on items that don't have a width/height and position set.
Modified Paths:
    osmf/trunk/framework/OSMF/org/osmf/layout/LayoutRenderer.as

If you're just doing it in a back and forth or spiral fashion, you don't need to check whether a square's been filled in. You just go from a start point to an end point. Those points and the squares in between are determined by simple arithmetic.
If you're doing it randomly, I wouldn't use the GUI elements themselves. I'd have, for example, and array of booleans that tells whether each square has been filled in.

LOV not being applied to a column

Problem: The first query runs quite fast as it is soft parsed, but the LOV values are not applied to the resulting values in the column CHECK_MARK. The second query is hard parsed (and slow due to that) but has its LOV value properly realized. The LOV being applied changes 0/NULL to white space and the 1 is a graphical checkmark.
For this situation an LOV is being applied to a column named "CHECK_MARK'. The column will have a value of 0/NULL or 1 if the row (employee) is in the source table (SCHEMA.EMPLOYEE_V) has its primary id (EMP_ID) in a collection named 'SELECTED_EMP_IDS'. The only values inside the collection is C001 storing the EMP_ID value of every employee selected.
--Works fast, but the report renders with 0/NULL and 1's instead of nothing for 0/NULL and an IMG tag for a value of 1.
SELECT
EMP_ID,
NVL((SELECT 1 FROM HTMLDB_COLLECTIONS WHERE C001 = EMPLOYEE_ID AND COLLECTION_NAME = ''SELECTED_EMP_IDS''),0) AS CHECK_MARK FROM SCHEMA.EMPLOYEE_V;
--Slow, but the img tag is properly output from the LOV.
SELECT
EMP_ID
0 CHECK_MARK FROM SHEMA.EMPLOYEE_V
LEFT JOIN (SELECT 1 CHECK_MARK FROM DUAL) ON (EMP_ID) IN (SELECT C001 FROM HTMLDB_COLLECTIONS WHERE COLLECTION_NAME = 'SELECTED_EMP_IDS';
Any reason for this or is there another way to format the query so it is both soft parsed and have the LOV properly output?

There is a collection, with C001 having some number of EMP_ID’s in it.
COLLECTION_NAME = ‘SELECTED_EMP_IDS’
C001
27
32
52
70Both of the following queries will return the same data:
(Query 1)
SELECT
EMP_ID,
NVL((SELECT 1 FROM HTMLDB_COLLECTIONS WHERE C001 = EMPLOYEE_ID AND COLLECTION_NAME = ''SELECTED_EMP_IDS''),0) AS CHECK_MARK FROM SCHEMA.EMPLOYEE_V;
(Query 2)
SELECT
EMP_ID
0 CHECK_MARK FROM SHEMA.EMPLOYEE_V
LEFT JOIN (SELECT 1 CHECK_MARK FROM DUAL) ON (EMP_ID) IN (SELECT C001 FROM HTMLDB_COLLECTIONS WHERE COLLECTION_NAME = 'SELECTED_EMP_IDS';
EMP_ID         |       CHECK_MARK         |     ...
10               0
15               0
27               1
32               1
52               1
70               1
110               0Where all the 1's in the checkmark column are also contained within the collection above. This query is used to render a report. The CHECK_MARK column in the report has a static LOV applied to it.
CHECK_MARK_LOV:
     Return Value     Display Value
     0
     1          <img src="/i/check_small_black.gif">When the page is run using Query 1, the CHECK_MARK column will display 0's and 1's. When running the page with the report having the source of Query 2, the LOV will be properly applied and the 0's will become white space and 1's will become <img src="/i/check_small_black.gif">..
I am just trying to figure out why Query 1 makes it so the CHECK_MARK column is rendered with the return value of the LOV while Query 2 renders the CHECK_MARK column with the proper LOV display value.

DHCP Option Tags are not being applied...

Hi,
About to loose my mind... basically we are working towards a small WYSE Thin Client deployment in our environment. The WYSE clients require to receive certain DHCP Option Tags to find the WCM server of which they receive their configuration from. Same
applies to the WDM Server as well. The problem is no matter what we do, our test client is not receiving the custom option tags we've defined in our DHCP server.
DHCP Servers:
vlan41
10.40.1.206
10.40.1.207
Test Client:
vlan46 - ip helpers defined on the switch
Set to receive the same ip address from the DHCP server through the reservation route.
Option Tags:
186 - WDM Server - 10.40.1.184
195 - WCM Server - 10.40.1.185
196 - WCM Path - /
I've installed Wire Shark on the test client to monitor the DHCP activity. The above custom options tags are not being pushed on to the client.
The Router, DNS Server and Domain Tags are being pushed. So it's working but also not working????!!!
Anybody with some insight to this problem?

Hi hpaul_p
In all fairness I'm about to give up... the vendor is not coming up with a solution and constantly blaming Microsoft. To further test and confirm this wasn't a network issue, I've setup a secondary test environment using a 4 port switch, a client and
a DHCP server. Same results!!! I'm really running out of time, so my work around is this: I've setup a SRV records pointing to the WCM server... in your case this would be SRV record for the WDM server. I've disabled the auto
discovery functionality of the WDM Agent, for some reason it seems to be clashing with the WCM agent. Since you will be using WDM only, don't disable auto discovery, tick the DNS SRV record from the Discovery Settings under the client agent.
I'm going to add the clients to the WDM server manually through their ip addresses so don't need auto discovery. From what I gather from the manuals the WCM searches for the repository or conifg servers in this order: 1. SRV 2.DNS (A record)
3.DHCP (Options), I bet it's the same with WDM. Though SRV and DNS methods has their limitations, if you will be using the default paths and credentials it shouldn't be a problem. This is all I have have. Steven Song I've forwarded you the
DHCP database, if you find any problems with it please let me know.

Image Colour Profiles are not being applied

When I import images in to InDesign CC 2014 the embedded colour profiles are not being activated.
Therefore images are looking flat and a bit washed out on screen.
In order to apply the colour profile I have to right click on the image go down to Graphics and the colour settings and select the correct profile.
In the InDesign colour settings menu I have Colour management policies set to Preserve Embedded Profiles on RGB and Preserve Numbers (ignore linked Profiles) for CMYK. However changing these to other options makes no difference, the profile still need to be activated on each image.
I am working with RGB images that have the Adobe RGB 1998 profile embedded in them.
I cannot figure out why this is happening!??

Check your color settings.

Some privileges granted to role not being inherited by users

I have created a role(app1_role) for a group of users and granted a select number of privileges to app1_role and then granted the app1_role to the users. However some of the privileges are not being inherited by the users in the application. The failures are in the plain sql code NOT in the PL/SQL code. The Oracle version is 10.2 on RedHat zLinux.
Any insight to why we are seeing this problem would be helpful since I do not want to explicitly grant the privileges to each of the users.

Can you get the results of querying SESSION_ROLES and SESSION_PRIVS in a session where you are getting the ORA-00942 errors?
Do your SQL statements include explicit schema names? Or do they rely on synonyms? Public or private synonyms? If you rely on private synonyms, any chance certain users are missing certain synonyms?
If you query DBA_ROLE_PRIVS for the user (GRANTEE) and role (GRANTED_ROLE), what is the value of DEFAULT_ROLE? Any chance the role was granted as a non-default role?
Have you verified that in the particular installation that is problematic that the role actually has the grants you expect it to have and that it has been granted to the user(s) you expect it to be granted to?
Justin

Managed proxy settings not being applied

I am currently having an issue with a certain managed preferences set in Workgroup manager.
Essentially, all machine preferences are applied by the clients (energy saver and such), except for network proxy settings and bypass domains.
Preferences are set on machine groups which my clients are members of, but the same happens if I set the same managed preferences on user accounts, also.
In each test I have done, an 'mcxquery' shows that the client has received the preferences, along with all the other settings I've applied and each time all of the preferences have applied except for the network proxy! Both the clients and the server have been re-installed from scratch, but the problem still persists.
Has anyone ever encountered anything similar? Does anyone have any suggestions on how I might get this working again?

Hi all,
I'm having exactly the same issue : most of the managed preferences being applied except proxy
I've checked with mcxquery : proxy settings are broadcasted, and I find the correct settings in the file /Library/Managed Preferences for the user, but when I check in Preferences/Network/Proxy, nothing appears ...
Any idea ?
Thanks,
PhC.

Parameter is not being applied

Hey all
i have the parameter in one of my reports, but when i change the value of the parameter the output or the result is not being changed.
no matter what i do it will keep on showing me the same data
any suggestions ?

Take a look at the query and look if the parameter is being used.
To get a better understanding of how things work, take a look at the data modelling guide here: For 11g
Oracle&reg; Fusion Middleware Data Modeling Guide for Oracle Business Intelligence Publisher 11g Release 1 (11.1.1) …
for 10g: http://docs.oracle.com/cd/E12844_01/doc/bip.1013/e12187.pdf
Thanks,
Bipuser

Dynamic access policy ACL not beeing applied to user

Hi all
I have just configured my ASA for ssl vpn
I have created a dynamic access policy with an ACL in it.
The user connects fine, and I can see on the logs that the DAP policy has applied to the user
However when I click on monitoring, it says no acl is applied to this session, and the client cannot get anywhere
why would this be?
cheers
Carl

When you go to dynamic access policies in ASDM is your NoVPN ACL at the top of the list (highest ACL priority)? These get processed in order and if your user is in both groups the first will be taken and the rest ignored.
Also, is your default policy at that bottom of this list deny access?

Policy not being applied to users

Similar Messages

Maybe you are looking for