i’m the Domain Admin for a medium sized company in Texas. We are running Windows 2003 Server Standard Edition SP1 with about 30 W2K/XP Pro workstations on the network. Everything seems to be working fine except I cannot get Domain Logon Scripts to work via Group Policy. The script that I want to run is setup to Map the specific drives for each user as they logon to the domain; pretty simple really. Before on other domains I have managed, I just placed the script in the Sysvol/Scripts folder and then put the name of the script in the Logon Script placeholder under the Profile tab for each user in the AD Users and Computers MMC. That isn’t working on this domain.
Then I realized that there Group Policy objects had been setup on this domain (not by me). So I started poking around to see if this could be what the problem was. I found this link: http://technet2.microsoft.com/WindowsServer/en/library/dfe7b84d-8727-4561-9767-ccb47a5bf9ba1033.mspx?mfr=true
In the guide, it reads:
help determine what kind of Group Policy problems you have, do the following:
1. Generate a Group Policy Results report using GPMC.
2. Examine the results of the report to find the answers to three questions that are used in navigating the flowchart:
? Does Group Policy Results list the GPO as applied?
? Is the setting listed in Group Policy Results Report?
? Is the GPO listed in the Denied List?
So, I figured out how to generate the Reports and then began analyzing them. The problem is, I cannot figure out how to answer the sub-questions of #2 above.
Can someone please push me in the right direction?
Why isn’t my script working properly? What do I need to do to get it working with the GPOs that are already setup? How can I “clean-up” the GPOs that are configured? I don’t even know if they are working properly or if we even need them, or what they are even doing.
I noticed in the C:\WINDOWS\sysvol\sysvol\Domain_Name\Policies folder on our DC that there are 5 subfolders all named with very long strings of alpha numeric characters such as: {3F8CFA85-6A62-456A-8932-283FB11B1C66} Are each one of these a separate “group policy”? If so, how can I tell what each one is doing and if I need it?
thanks for all help and advice,
TB in Austin
