GPO中的用户配置不overrided [英] GPOs for User Configuration are not overrided
问题描述
我有两个的GPO在我的领域 - >默认域策略和 GPO - Diretoria 。 默认域策略被配置到客户端的所有IE浏览器中设置代理服务器设置（用户配置>策略> Windows设置> Internet Explorer维护>连接>代理服务器设置的）。下面是详细的配置使用：
I've a two GPOs on my domain -> "Default Domain Policy" and "GPO - Diretoria". Default Domain Policy is configured to set proxy settings on all IE browser of the clients (User Config > Policies > Windows Settings > Internet Explorer Maintenance > Connection > Proxy Settings). Here are the detailed config used:
Internet Explorer Connection
----------------------------
HTTP Proxy Server: 192.168.100.1:3128
Secure Proxy Server: 192.168.100.1:3128
FTP Proxy Server: 192.168.100.1:3128
Gopher Proxy Server: 192.168.100.1:3128
Socks Proxy Server: 192.168.100.1:3128
Auto Config Enable: No
Enable Proxy: Yes
Use same Proxy: Yes
在其他GPO（ GPO - Diretoria ）代理设置的未配置。 启用代理服务器设置复选框在代理服务器设置窗口中禁用。这GPO链接到一个OU名为 Diretoria 。在这个OU中，有3台电脑。当我在任的3台电脑exec的一个运行gpupdate（即使运行gpupdate / force），代理设置仍然设置好的中配置默认域策略！
In the other GPO (GPO - Diretoria) the proxy settings are not configured. The "Enable proxy settings" check box are disabled in Proxy Settings window. This GPO are linked to an OU called Diretoria. Inside this OU, there are 3 computers. When I exec a gpupdate (even gpupdate /force) in any of the 3 computers, the proxy settings still setted as configured in Default Domain Policy!
随后，从来就进行了各种测试，只与用户配置设置和，从来就注意到（运行的先按g presult / Z 的）的任何用户配置设置设置好的在默认域策略GPO的无法替代的GPO - Diretoria用户配置设置！但在计算机配置设置的被替换完美！
Then, I´ve performed various tests only with User Configuration Settings and, I´ve noticed (by running gpresult /z) that any User Configuration Setting setted on Default Domain Policy GPO cannot be replaced by the "GPO - Diretoria" User Configuration Settings! BUT, the Computer Configuration Settings are replaced perfectly!
COMPUTER SETTINGS
------------------
CN=MARCOS-SUPVM,OU=Diretoria,DC=internal,DC=domain,DC=com,DC=br
Last time Group Policy was applied: 5/16/2011 at 5:31:36 PM
Group Policy was applied from: DC4.internal.domain.com.br
Group Policy slow link threshold: 500 kbps
Domain Name: internal
Domain Type: Windows 2000
Applied Group Policy Objects
-----------------------------
GPO - Diretoria
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
.
.
.
.
USER SETTINGS
--------------
CN=Administrador,CN=Users,DC=internal,DC=domain,DC=com,DC=br
Last time Group Policy was applied: 5/16/2011 at 5:31:39 PM
Group Policy was applied from: DC4.internal.domain.com.br
Group Policy slow link threshold: 500 kbps
Domain Name: INTERNAL
Domain Type: Windows 2000
Applied Group Policy Objects
-----------------------------
Default Domain Policy <-- SEE HERE??? "GPO - Diretoria" ARE NOT PROCESSED!
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
为什么？
推荐答案
从用户配置GPO - Diretoria 将不会被应用，因为用户对象 CN = Administrador，CN =用户，DC =内部，DC =域，DC = COM，DC = BR 是不是在DiretoriaOU。
The user configuration from GPO - Diretoria won't be applied because your user object CN=Administrador,CN=Users,DC=internal,DC=domain,DC=com,DC=br is not under "Diretoria" OU.
从计算机配置GPO - Diretora 的应用，因为你的计算机对象
CN =马科斯SUPVM，OU = Diretoria，DC =内部，DC =域，DC = COM，DC = BR 里面Directoria欧
The computer configuration from GPO - Diretora is applied because your computer object
CN=MARCOS-SUPVM,OU=Diretoria,DC=internal,DC=domain,DC=com,DC=br is inside "Directoria" OU
尝试将您的管理员用户对象OU = Diretoria。然后，你会看到用户的配置被应用为好。
Try moving your administrator user object to OU=Diretoria. Then, you will see user configuration being applied as well.
这篇关于GPO中的用户配置不overrided的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
