我的域上有两个 GPO ->“默认域策略”和“ GPO - Diretoria ”。默认域策略配置为在客户端的所有 IE 浏览器上设置代理设置(用户配置 > 策略 > Windows 设置 > Internet Explorer 维护 > 连接 > 代理设置)。以下是使用的详细配置:
Internet Explorer Connection
----------------------------
HTTP Proxy Server: 192.168.100.1:3128
Secure Proxy Server: 192.168.100.1:3128
FTP Proxy Server: 192.168.100.1:3128
Gopher Proxy Server: 192.168.100.1:3128
Socks Proxy Server: 192.168.100.1:3128
Auto Config Enable: No
Enable Proxy: Yes
Use same Proxy: Yes
在另一个 GPO ( GPO-Diretoria ) 中未配置代理设置。“启用代理设置”复选框在“代理设置”窗口中被禁用。此 GPO 链接到名为Diretoria的 OU 。在这个 OU 内,有 3 台计算机。当我在 3 台计算机中的任何一台中执行 gpupdate(甚至是 gpupdate /force)时,代理设置仍然设置为默认域策略中的配置!
然后,我只使用用户配置设置执行了各种测试,并且我注意到(通过运行gpresult /z)在默认域策略 GPO 上设置的任何用户配置设置都不能被“GPO - Diretoria”用户配置设置替换!但是,计算机配置设置已被完美替换!
COMPUTER SETTINGS
------------------
CN=MARCOS-SUPVM,OU=Diretoria,DC=internal,DC=domain,DC=com,DC=br
Last time Group Policy was applied: 5/16/2011 at 5:31:36 PM
Group Policy was applied from: DC4.internal.domain.com.br
Group Policy slow link threshold: 500 kbps
Domain Name: internal
Domain Type: Windows 2000
Applied Group Policy Objects
-----------------------------
GPO - Diretoria
Default Domain Policy
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
.
.
.
.
USER SETTINGS
--------------
CN=Administrador,CN=Users,DC=internal,DC=domain,DC=com,DC=br
Last time Group Policy was applied: 5/16/2011 at 5:31:39 PM
Group Policy was applied from: DC4.internal.domain.com.br
Group Policy slow link threshold: 500 kbps
Domain Name: INTERNAL
Domain Type: Windows 2000
Applied Group Policy Objects
-----------------------------
Default Domain Policy <-- SEE HERE??? "GPO - Diretoria" ARE NOT PROCESSED!
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
为什么?