-2

我的域上有两个 GPO ->“默认域策略”和“ GPO - Diretoria ”。默认域策略配置为在客户端的所有 IE 浏览器上设置代理设置(用户配置 > 策略 > Windows 设置 > Internet Explorer 维护 > 连接 > 代理设置)。以下是使用的详细配置:

Internet Explorer Connection
----------------------------
    HTTP Proxy Server:   192.168.100.1:3128
    Secure Proxy Server: 192.168.100.1:3128
    FTP Proxy Server:    192.168.100.1:3128
    Gopher Proxy Server: 192.168.100.1:3128
    Socks Proxy Server:  192.168.100.1:3128
    Auto Config Enable:  No
    Enable Proxy:        Yes
    Use same Proxy:      Yes

在另一个 GPO ( GPO-Diretoria ) 中未配置代理设置。“启用代理设置”复选框在“代理设置”窗口中被禁用。此 GPO 链接到名为Diretoria的 OU 。在这个 OU 内,有 3 台计算机。当我在 3 台计算机中的任何一台中执行 gpupdate(甚至是 gpupdate /force)时,代理设置仍然设置为默认域策略中的配置!

然后,我只使用用户配置设置执行了各种测试,并且我注意到(通过运行gpresult /z)在默认域策略 GPO 上设置的任何用户配置设置都不能被“GPO - Diretoria”用户配置设置替换!但是,计算机配置设置已被完美替换!

COMPUTER SETTINGS
------------------
    CN=MARCOS-SUPVM,OU=Diretoria,DC=internal,DC=domain,DC=com,DC=br
    Last time Group Policy was applied: 5/16/2011 at 5:31:36 PM
    Group Policy was applied from:      DC4.internal.domain.com.br
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        internal
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        GPO - Diretoria
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)
.
.
.
.

USER SETTINGS
--------------
    CN=Administrador,CN=Users,DC=internal,DC=domain,DC=com,DC=br
    Last time Group Policy was applied: 5/16/2011 at 5:31:39 PM
    Group Policy was applied from:      DC4.internal.domain.com.br
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        INTERNAL
    Domain Type:                        Windows 2000

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy  <-- SEE HERE??? "GPO - Diretoria" ARE NOT PROCESSED!

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

为什么?

4

2 回答 2

0

GPO - Diretoria不会应用来自的用户配置,因为您的用户对象CN=Administrador,CN=Users,DC=internal,DC=domain,DC=com,DC=br不在“Diretoria”OU 下。

GPO - Diretora由于您的计算机对象 CN=MARCOS-SUPVM,OU=Diretoria,DC=internal,DC=domain,DC=com,DC=br位于“Directoria”OU 中,因此应用了计算机配置

尝试将您的管理员用户对象移动到 OU=Diretoria。然后,您将看到也应用了用户配置。

于 2011-05-17T06:48:09.477 回答
0

我认为您混淆了用户策略和计算机策略,您设置的策略适用于 OU 中的用户而不适用于计算机。我错了吗 ?

于 2011-05-17T06:44:54.423 回答