Discussion:
GPO doesn't work for specific OU
(too old to reply)
jcy
2010-06-30 22:49:30 UTC
Permalink
Hello,

I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I then
right-clicked on the OU and chose "Create & Link a GPO here". Under
"Links", I right-clicked on the OU and there are checks next to "Enforced"
and "Link Enabled".

I then edited the GP for the OU by right-clicking on the GPO and choosing
"Edit". I did a test edit by going to:

User Conf \ Admin Temp \ Start Menu and Taskbar

and set "Remove Run Menu from Start Menu" to Enabled.

It's not taking, and I can't seem to find the reason on the DC's EV\App or
EV\System logs. On the Term Serv's EV\App logs, there is an entry that
says:

Execution of GPO scripts has timed out and have been terminated.

What am I doing wrong? Ultimately I hope to setup GPO for this TS to a
select group in Security Filtering.

Thanks,

jcy
Gregg Hill
2010-07-01 01:40:23 UTC
Permalink
Use GPMC to test, and enable Loopback Processing with Replace.

Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I then
right-clicked on the OU and chose "Create & Link a GPO here". Under
"Links", I right-clicked on the OU and there are checks next to "Enforced"
and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and choosing
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's EV\App or
EV\System logs. On the Term Serv's EV\App logs, there is an entry that
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to a
select group in Security Filtering.
Thanks,
jcy
jcy
2010-07-01 06:58:07 UTC
Permalink
Thank you, that fixed it right up.

jcy

"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com> wrote in
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I then
right-clicked on the OU and chose "Create & Link a GPO here". Under
"Links", I right-clicked on the OU and there are checks next to
"Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and choosing
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's EV\App
or EV\System logs. On the Term Serv's EV\App logs, there is an entry
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to a
select group in Security Filtering.
Thanks,
jcy
Gregg Hill
2010-07-01 16:42:05 UTC
Permalink
Computer config settings will work without loopback processing, but User
config settings need it.

Gregg
Post by jcy
Thank you, that fixed it right up.
jcy
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I then
right-clicked on the OU and chose "Create & Link a GPO here". Under
"Links", I right-clicked on the OU and there are checks next to
"Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's EV\App
or EV\System logs. On the Term Serv's EV\App logs, there is an entry
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to a
select group in Security Filtering.
Thanks,
jcy
jcy
2010-07-02 13:03:33 UTC
Permalink
I just put in my first computer config setting with a software restriction
policy under:

computer config \ windows settings \ security settings \ software
restrictions

and it didn't take, though your earlier tip about loopback has worked
perfectly for all user config settings.

Any thoughts?

Thanks again,

jcy

"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com> wrote in
Post by Gregg Hill
Computer config settings will work without loopback processing, but User
config settings need it.
Gregg
Post by jcy
Thank you, that fixed it right up.
jcy
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I
then right-clicked on the OU and chose "Create & Link a GPO here".
Under "Links", I right-clicked on the OU and there are checks next to
"Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's EV\App
or EV\System logs. On the Term Serv's EV\App logs, there is an entry
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to a
select group in Security Filtering.
Thanks,
jcy
Gregg Hill
2010-07-02 18:52:46 UTC
Permalink
Do you have the Win 2003 Std R2 SP2 Term Server in the OU? It should be the
only thing in that OU.

Gregg
Post by jcy
I just put in my first computer config setting with a software restriction
computer config \ windows settings \ security settings \ software
restrictions
and it didn't take, though your earlier tip about loopback has worked
perfectly for all user config settings.
Any thoughts?
Thanks again,
jcy
Post by Gregg Hill
Computer config settings will work without loopback processing, but User
config settings need it.
Gregg
Post by jcy
Thank you, that fixed it right up.
jcy
"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com>
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I
then right-clicked on the OU and chose "Create & Link a GPO here".
Under "Links", I right-clicked on the OU and there are checks next to
"Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's
EV\App or EV\System logs. On the Term Serv's EV\App logs, there is an
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to
a select group in Security Filtering.
Thanks,
jcy
jcy
2010-07-02 19:04:56 UTC
Permalink
Yes, I created a separate OU and is the only server in there.

jcy

"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com> wrote in
Post by Gregg Hill
Do you have the Win 2003 Std R2 SP2 Term Server in the OU? It should be
the only thing in that OU.
Gregg
Post by jcy
I just put in my first computer config setting with a software
computer config \ windows settings \ security settings \ software
restrictions
and it didn't take, though your earlier tip about loopback has worked
perfectly for all user config settings.
Any thoughts?
Thanks again,
jcy
Post by Gregg Hill
Computer config settings will work without loopback processing, but User
config settings need it.
Gregg
Post by jcy
Thank you, that fixed it right up.
jcy
"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com>
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I
then right-clicked on the OU and chose "Create & Link a GPO here".
Under "Links", I right-clicked on the OU and there are checks next to
"Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's
EV\App or EV\System logs. On the Term Serv's EV\App logs, there is
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS to
a select group in Security Filtering.
Thanks,
jcy
Gregg Hill
2010-07-02 22:26:58 UTC
Permalink
Use the GPMC to test the policy to see why it does not apply.

Google "GPMC" for info.
Post by jcy
Yes, I created a separate OU and is the only server in there.
jcy
Post by Gregg Hill
Do you have the Win 2003 Std R2 SP2 Term Server in the OU? It should be
the only thing in that OU.
Gregg
Post by jcy
I just put in my first computer config setting with a software
computer config \ windows settings \ security settings \ software
restrictions
and it didn't take, though your earlier tip about loopback has worked
perfectly for all user config settings.
Any thoughts?
Thanks again,
jcy
"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com>
Post by Gregg Hill
Computer config settings will work without loopback processing, but
User config settings need it.
Gregg
Post by jcy
Thank you, that fixed it right up.
jcy
"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com>
Post by Gregg Hill
Use GPMC to test, and enable Loopback Processing with Replace.
Gregg
Post by jcy
Hello,
I created a new OU for a single Win 2003 Std R2 SP2 Term Server. I
then right-clicked on the OU and chose "Create & Link a GPO here".
Under "Links", I right-clicked on the OU and there are checks next
to "Enforced" and "Link Enabled".
I then edited the GP for the OU by right-clicking on the GPO and
User Conf \ Admin Temp \ Start Menu and Taskbar
and set "Remove Run Menu from Start Menu" to Enabled.
It's not taking, and I can't seem to find the reason on the DC's
EV\App or EV\System logs. On the Term Serv's EV\App logs, there is
Execution of GPO scripts has timed out and have been terminated.
What am I doing wrong? Ultimately I hope to setup GPO for this TS
to a select group in Security Filtering.
Thanks,
jcy
Loading...