GPOs are not taking effect

[ciscotx]

I have a a network setup with a main domain controller in one location. from there i have three locations with one domain controller in each location and they replicate off the main dc. I noticed that in one of the locations the GPO is not taking effect under one account that should be locked. I do a gpresult and under the user settings no policies are applied. what can I check and do in order for the policy to take effect??

 

[pgaliardo]

Check if the user is Denied the GPO, or is a member of a group that is denied the GPO.

 

[ciscotx]

actually one GPO is denied (security) and another GPO is being applied but not properly. What I want to say is on the GPO being applied only half of the policy applies not all restrictions. Could it be a replication problem on the domain controller. this only happens in one location with that account. if I try that account at another location it works flawlessly. Help !!!

 

[58sniper]

Run a results modeling from the Group Policy Management Console. Target that machine and the current user. It should shed some light onto the problem.

http://technet2.microsoft.com/windo...2644-431f-a61d-dd7b569c836a1033.mspx?mfr=true

Pat Richard
Microsoft Exchange MVP
Contributing author Microsoft Exchange Server 2007: The Complete Reference

 

[ciscotx]

how can you test replication status from the primary controller to the other domain controlers??? is it done through dcdiag /test:replication????