GPO issue with Server 2012r2
-
I enabled 3 group policies on a DC to disable writing to a CD but now management is reversing their decision and asking me to remove these policies. I did and ran gpupdate on the servers and workstations but access to CD drives is still denied. Removed workstation from domain with same issue. Disabled the same 3 policies in local group policy but access is still denied to the CD drives. Any idea how to enable CD burning again?
-
You don't want to just remove the policy, you need to re-enable your GPOs and change the setting back to the default or enabled (assuming disabled is what killed them in the first place - GPOs sometimes word things funny - Disable CD burning - Enabled = can't burn, disabled = can burn, Not Configured = leave in last position.
So I'd start by re-enabling the GPOs, then changing the setting to the opposite of what you had before, then from the PCs gpupdate /force, reboot, try.
-
Dashrender is right. You need to enable the policy because if you remove it, there will be no policy (nothing is changed).
Run RSOP.msc on one of the PCs and see if it is picking up the policy, you can also drill down and see if the policy is actually being applied.
-
@Dashrender said in GPO issue with Server 2012r2:
You don't want to just remove the policy, you need to re-enable your GPOs and change the setting back to the default or enabled (assuming disabled is what killed them in the first place - GPOs sometimes word things funny - Disable CD burning - Enabled = can't burn, disabled = can burn, Not Configured = leave in last position.
So I'd start by re-enabling the GPOs, then changing the setting to the opposite of what you had before, then from the PCs gpupdate /force, reboot, try.
I did all this and have the same issue. Any other ideas?
-
what happens when you run RSOP as IRJ mentioned? do you see the policy being applied?
-
Could you show us screen shots of the GPO itself.
-
-
At the bottom of the main GP management window you will see the option Group Policy Results Create a new one there pick a machine you know this GPO is applied to, a users who has logged on since you made the change, and run the report, then post those sanitized results if possible.
-
-
The last GPO problem I ran into was because there was a WMI filter on the policies that prevented Windows 10 from executing them.
Are there any WMI filters in place?
-
No WMI filters are in place. Too bad we dont get 1 free support incident each year from MS just for using their stuff.
