主页 / server / 问题 / 646593
Accepted
Saariko
Asked: 2014-11-25 02:13:42 +0800 CST

GPO 被过滤掉 - BGinfo 报告的错误域名

  • 772

我正在尝试查找我遇到的组策略部署问题。

问题是与域相关的 GPO 被过滤掉了。我们最近将我们的域从：CONTOSO重命名为：lan.CONTOSO.com（Netbios 名称为：CONTOSO并且未更改）。

我开始调查，问题的第一个迹象是在运行 BGinfo 时 - 我们仍然在LOGON DOMAIN和MACHINE DOMAIN中看到：CONTOSO而不是我想看到的：lan.CONTOSO.com

如果我运行：GPresult，我看到的域是：lan.CONTOSO.com（以及正确的 DC、OU 值）

  • 此错误遍布计算机（包括 DC）

那么：我应该在 BGinfo 报告中看到什么？以及如何修复它，如果它是错误的。

编辑：

这里是： gpresult /h 结果

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 24/11/2014 at 11:37:00 AM

RSOP data for CONTOSSO\user.admin on LTLVADMIN1407 : Logging Mode
---------------------------------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  6.1.7601
Site Name:                   SiteIL
Roaming Profile:             N/A
Local Profile:               C:\Users\user.admin
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=LTLVADMIN1407,OU=Laptops,OU=Default,OU=CONTOSSO_Computers,DC=lan,DC=CONTOSSO,DC=com
Last time Group Policy was applied: 24/11/2014 at 10:06:21 AM
Group Policy was applied from:      DC3.lan.CONTOSSO.com
Group Policy slow link threshold:   500 kbps
Domain Name:                        CONTOSSO
Domain Type:                        Windows 2000

Applied Group Policy Objects
-----------------------------
    Default Domain Policy
    SpiceWorks Firewall
    Firewall - Disabled
    Printers
    Sophos Tasks Enabler
    Logon - Enable Verbose State
    WSUS - Default

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
    Local Group Policy
        Filtering:  Not Applied (Empty)

The computer is a part of the following security groups
-------------------------------------------------------
    BUILTIN\Administrators
    Everyone
    SQLServerMSSQLServerADHelperUser$LTLVADMIN1407
    SophosUser
    BUILTIN\Users
    NT AUTHORITY\NETWORK
    NT AUTHORITY\Authenticated Users
    This Organization
    LTLVADMIN1407$
    System Mandatory Level


USER SETTINGS1
--------------
CN=ADMIN User,OU=IT_Department,OU=CONTOSSO_Users,DC=lan,DC=CONTOSSO,DC=com
Last time Group Policy was applied: 24/11/2014 at 11:05:04 AM
Group Policy was applied from:      DC3.lan.CONTOSSO.com
Group Policy slow link threshold:   500 kbps
Domain Name:                        CONTOSSO
Domain Type:                        Windows 2000

Applied Group Policy Objects
-----------------------------
    Default Domain Policy
    Drive Mappings
    Printers

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
    SpiceWorks Firewall
        Filtering:  Not Applied (Empty)

    Local Group Policy
        Filtering:  Not Applied (Empty)

    Sophos Tasks Enabler
        Filtering:  Not Applied (Empty)

    Logon - Enable Verbose State
        Filtering:  Not Applied (Empty)

    Firewall - Disabled
        Filtering:  Not Applied (Empty)

    WSUS - Default
        Filtering:  Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
    Everyone
    HelpLibraryUpdaters
    SophosUser
    SophosAdministrator
    BUILTIN\Users
    BUILTIN\Administrators
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    High Mandatory Level

这是计算机上的 UserDnsDomain

C:\Users\user.admin>echo %UserDnsDomain%+
LAN.CONTOSO.COM+

我提到的 GPO 甚至没有显示在列表中：它是一个登录脚本，它是一个用户配置值。

在此处输入图像描述

在此处输入图像描述

总局信息

在此处输入图像描述

组策略建模

我认为问题出在这里，我的用户名定义为：CONTOSSO\user 而用户容器定义为：lan.contoso.com\contoso_users。我需要的 GPO 也没有显示。

在此处输入图像描述

问题可能出在 Netbios 名称上？缓存值？

在此处输入图像描述

windows-server-2012-r2

1 个回答

  1. Best Answer

    您还需要将 GPO 链接到域。

    将您的 GPO 拖到您希望它应用的域（将其广告到“位置”）

    在此处输入图像描述

    • 0

相关问题