Group Policy Issues

8 Jul 2009 4:05 PM

microsoft

Hi

Is there a tool to identify if multiple group policies are running in your
environment. I have a Windows 2000 DC running SP4. Currently in my event
log I am logging Logon/Logoff and Account Logon Events, however when I check
the Default domain policy these items are not defined. In addition the
Password Length, expiration period and all these items are set, yet I cannot
seem to see these settings.

Please help.

8 Jul 2009 7:40 PM

Ace Fekay [Microsoft Certified Trainer]

"microsoft" <micros***@discussions.microsoft.com> wrote in message news:A52A679F-B9CE-4303-A0C5-C2E2DCF7145A@microsoft.com...
> Hi
>
> Is there a tool to identify if multiple group policies are running in your
> environment. I have a Windows 2000 DC running SP4. Currently in my event
> log I am logging Logon/Logoff and Account Logon Events, however when I check
> the Default domain policy these items are not defined. In addition the
> Password Length, expiration period and all these items are set, yet I cannot
> seem to see these settings.
>
> Please help.

Did you enable Auditing for Account Logon Events? It's not on by default. If you enabled, it, how did you do it? Normally we enable this setting on the domain controllers' Domain Policy (start/admin tools/domain controller policy), or it can be enabled on the Default Domain Controllers OU by creating a separate GPO for this (do NOT alter the default domain controllers GPO).

Also, password policies are set at the domain level, no where else, on a 2000 or 2003 domain. So where did you set the password policies?

Are all your machines ONLY using the internal DNS server as a DNS address? If not, such as using your ISP or router as a DNS, many things just won't work.

Please post an ipconfig /all from the domain controller and a sample workstation that this is not working on, please.

As for checking GPOs, you can install the 2003 Admin Pack tools on an XP machine, then the Group Policy Management Console to look at the 2000 GPOs.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among responding engineers, as well as to help others benefit from your resolution.

Ace Fekay, MCT, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer
ace***@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

9 Jul 2009 6:12 AM

Florian Frommherz [MVP]

Howdie!

microsoft schrieb:

> Is there a tool to identify if multiple group policies are running in your
> environment. I have a Windows 2000 DC running SP4. Currently in my event
> log I am logging Logon/Logoff and Account Logon Events, however when I check
> the Default domain policy these items are not defined. In addition the
> Password Length, expiration period and all these items are set, yet I cannot
> seem to see these settings.

Download GPMC to a Windows XP or Server 2003 machine and use that to
look into Group Policies of your domain.

Cheers,
Florian

--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

9 Jul 2009 7:02 AM

Meinolf Weber [MVP-DS]

Hello Microsoft,

When you have at least one XP or 2003 machine use GPMC:
http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=0a6d4c24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en

How did you configure your Auditing on the DCs OU or on domain level?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Show quoteHide quote

> Hi
>
> Is there a tool to identify if multiple group policies are running in
> your environment. I have a Windows 2000 DC running SP4. Currently in
> my event log I am logging Logon/Logoff and Account Logon Events,
> however when I check the Default domain policy these items are not
> defined. In addition the Password Length, expiration period and all
> these items are set, yet I cannot seem to see these settings.
>
> Please help.
>

Group Policy Issues - URGENT