GPO Run these programs at user logon not taking effect The Next CEO of Stack OverflowGPO Computer Settings not updating. Default Domain policy and all User Settings work fineGPO Security Filtering Not WorkingUse group policy to force certain security groups to log off remote desktop sessionsUser Configuration GPO doesn't apply to local usersGPO: User logon script not runningGPO: Run PowerShell logon script after explorer.exe has been loadedWhat exactly do the two “Do not process the legacy run list” group policy settings do?Apply Windows Firewall Rule GPO to Computer GroupMap Network Drive GPO not working on loginGPO not applied (unknown reason)
Is it ever safe to open a suspicious html file (e.g. email attachment)?
How to count occurrences of text in a file?
Why am I allowed to create multiple unique pointers from a single object?
MessageLevel in QGIS3
Why has the US not been more assertive in confronting Russia in recent years?
Does it take more energy to get to Venus or to Mars?
How did the Bene Gesserit know how to make a Kwisatz Haderach?
How do I go from 300 unfinished/half written blog posts, to published posts?
Between two walls
Are there any limitations on attacking while grappling?
How do we know the LHC results are robust?
How to start emacs in "nothing" mode (`fundamental-mode`)
A "random" question: usage of "random" as adjective in Spanish
What benefits would be gained by using human laborers instead of drones in deep sea mining?
How to transpose the 1st and -1th levels of arbitrarily nested array?
Limits on contract work without pre-agreed price/contract (UK)
What is the result of assigning to std::vector<T>::begin()?
How to avoid supervisors with prejudiced views?
Skipping indices in a product
Is there a way to save my career from absolute disaster?
Can we say or write : "No, it'sn't"?
Bold, vivid family
Why don't programming languages automatically manage the synchronous/asynchronous problem?
Novel about a guy who is possessed by the divine essence and the world ends?
GPO Run these programs at user logon not taking effect
The Next CEO of Stack OverflowGPO Computer Settings not updating. Default Domain policy and all User Settings work fineGPO Security Filtering Not WorkingUse group policy to force certain security groups to log off remote desktop sessionsUser Configuration GPO doesn't apply to local usersGPO: User logon script not runningGPO: Run PowerShell logon script after explorer.exe has been loadedWhat exactly do the two “Do not process the legacy run list” group policy settings do?Apply Windows Firewall Rule GPO to Computer GroupMap Network Drive GPO not working on loginGPO not applied (unknown reason)
When on our W2k8-R2 DC I create a new GPO and configure
"Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon"
to
"c:windowssystem32notepad.exe" (just for testing) it won't take effect on Win 7 SP1, no matter what the Security Filtering options are.
It seems other settings (in the very same GPO) become active but "run these programs at user login" from the computer policies section doesn't. I configure the very same setting in the section "user policies" instead and add "Authenticated Users" to Security Filtering, the program will be started. But that's not what I need.
I can reproduce the issue, here are the exact steps:
- create a new group "group-a" for later security filtering
- create a new GPO
- set "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:windowssystem32notepad.exe"
- for setting the scope remove "authenticated users" from Security Filtering and add "group-a" instead
- link the GPO to the domain root
- make "test computer" a member of "group-a"
- on "test computer" run "gpupdate /force", reboot, log in
Issue: notepad is not being started.
What I'm aiming for is obvious:
Depending on the membership of group-a I want to configure certain programs that should be started whenever a user logs in.
gpresult /R returns that it would be applying the GPO. (It actually is but the setting "run these programs at user login" is not being applied.)
For debugging I started MMC / RSoP on one of the machines on which the GPO should have been applied and found that "run these programs at user login" is not set (which seems to be the reason why the GPO won't work on the machines).
Searching the web I found similar reports on technet but no solution was found and the user used a workaround instead.
If I change the GPO so that I use the very same setting in "user configuration" instead of "computer configuration" it works as long as I add "authenticated users" to the Security Filtering. But then the GPO is applied to all users and not only to the ones using computers which are members of group-a. According to "www.grouppolicy.biz/2010/05/how-to-apply-a-group-policy-object-to-individual-users-or-computer/" I should not remove "authenticated users" but alter the security setting instead, but under Win2k8 I cannot find security settings "apply" for "authenticated users" so I cannot remove that setting, there's only "read" or "read and modify".
So two questions:
1. Why doesn't it work when using "computer settings"
2. What about that Security Filtering with removing "authenticated users" and using group-a instead?
T.
windows-server-2008-r2 group-policy
asked Feb 6 '14 at 17:07
user208383user208383
31114
add a comment |
When on our W2k8-R2 DC I create a new GPO and configure
"Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon"
to
"c:windowssystem32notepad.exe" (just for testing) it won't take effect on Win 7 SP1, no matter what the Security Filtering options are.
It seems other settings (in the very same GPO) become active but "run these programs at user login" from the computer policies section doesn't. I configure the very same setting in the section "user policies" instead and add "Authenticated Users" to Security Filtering, the program will be started. But that's not what I need.
I can reproduce the issue, here are the exact steps:
- create a new group "group-a" for later security filtering
- create a new GPO
- set "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:windowssystem32notepad.exe"
- for setting the scope remove "authenticated users" from Security Filtering and add "group-a" instead
- link the GPO to the domain root
- make "test computer" a member of "group-a"
- on "test computer" run "gpupdate /force", reboot, log in
Issue: notepad is not being started.
What I'm aiming for is obvious:
Depending on the membership of group-a I want to configure certain programs that should be started whenever a user logs in.
gpresult /R returns that it would be applying the GPO. (It actually is but the setting "run these programs at user login" is not being applied.)
For debugging I started MMC / RSoP on one of the machines on which the GPO should have been applied and found that "run these programs at user login" is not set (which seems to be the reason why the GPO won't work on the machines).
Searching the web I found similar reports on technet but no solution was found and the user used a workaround instead.
If I change the GPO so that I use the very same setting in "user configuration" instead of "computer configuration" it works as long as I add "authenticated users" to the Security Filtering. But then the GPO is applied to all users and not only to the ones using computers which are members of group-a. According to "www.grouppolicy.biz/2010/05/how-to-apply-a-group-policy-object-to-individual-users-or-computer/" I should not remove "authenticated users" but alter the security setting instead, but under Win2k8 I cannot find security settings "apply" for "authenticated users" so I cannot remove that setting, there's only "read" or "read and modify".
So two questions:
1. Why doesn't it work when using "computer settings"
2. What about that Security Filtering with removing "authenticated users" and using group-a instead?
T.
windows-server-2008-r2 group-policy
asked Feb 6 '14 at 17:07
user208383user208383
31114
2
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22
add a comment |
When on our W2k8-R2 DC I create a new GPO and configure
"Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon"
to
"c:windowssystem32notepad.exe" (just for testing) it won't take effect on Win 7 SP1, no matter what the Security Filtering options are.
It seems other settings (in the very same GPO) become active but "run these programs at user login" from the computer policies section doesn't. I configure the very same setting in the section "user policies" instead and add "Authenticated Users" to Security Filtering, the program will be started. But that's not what I need.
I can reproduce the issue, here are the exact steps:
- create a new group "group-a" for later security filtering
- create a new GPO
- set "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:windowssystem32notepad.exe"
- for setting the scope remove "authenticated users" from Security Filtering and add "group-a" instead
- link the GPO to the domain root
- make "test computer" a member of "group-a"
- on "test computer" run "gpupdate /force", reboot, log in
Issue: notepad is not being started.
What I'm aiming for is obvious:
Depending on the membership of group-a I want to configure certain programs that should be started whenever a user logs in.
gpresult /R returns that it would be applying the GPO. (It actually is but the setting "run these programs at user login" is not being applied.)
For debugging I started MMC / RSoP on one of the machines on which the GPO should have been applied and found that "run these programs at user login" is not set (which seems to be the reason why the GPO won't work on the machines).
Searching the web I found similar reports on technet but no solution was found and the user used a workaround instead.
If I change the GPO so that I use the very same setting in "user configuration" instead of "computer configuration" it works as long as I add "authenticated users" to the Security Filtering. But then the GPO is applied to all users and not only to the ones using computers which are members of group-a. According to "www.grouppolicy.biz/2010/05/how-to-apply-a-group-policy-object-to-individual-users-or-computer/" I should not remove "authenticated users" but alter the security setting instead, but under Win2k8 I cannot find security settings "apply" for "authenticated users" so I cannot remove that setting, there's only "read" or "read and modify".
So two questions:
1. Why doesn't it work when using "computer settings"
2. What about that Security Filtering with removing "authenticated users" and using group-a instead?
T.
windows-server-2008-r2 group-policy
asked Feb 6 '14 at 17:07
user208383user208383
31114
When on our W2k8-R2 DC I create a new GPO and configure
"Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon"
to
"c:windowssystem32notepad.exe" (just for testing) it won't take effect on Win 7 SP1, no matter what the Security Filtering options are.
It seems other settings (in the very same GPO) become active but "run these programs at user login" from the computer policies section doesn't. I configure the very same setting in the section "user policies" instead and add "Authenticated Users" to Security Filtering, the program will be started. But that's not what I need.
I can reproduce the issue, here are the exact steps:
- create a new group "group-a" for later security filtering
- create a new GPO
- set "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:windowssystem32notepad.exe"
- for setting the scope remove "authenticated users" from Security Filtering and add "group-a" instead
- link the GPO to the domain root
- make "test computer" a member of "group-a"
- on "test computer" run "gpupdate /force", reboot, log in
Issue: notepad is not being started.
What I'm aiming for is obvious:
Depending on the membership of group-a I want to configure certain programs that should be started whenever a user logs in.
gpresult /R returns that it would be applying the GPO. (It actually is but the setting "run these programs at user login" is not being applied.)
For debugging I started MMC / RSoP on one of the machines on which the GPO should have been applied and found that "run these programs at user login" is not set (which seems to be the reason why the GPO won't work on the machines).
Searching the web I found similar reports on technet but no solution was found and the user used a workaround instead.
If I change the GPO so that I use the very same setting in "user configuration" instead of "computer configuration" it works as long as I add "authenticated users" to the Security Filtering. But then the GPO is applied to all users and not only to the ones using computers which are members of group-a. According to "www.grouppolicy.biz/2010/05/how-to-apply-a-group-policy-object-to-individual-users-or-computer/" I should not remove "authenticated users" but alter the security setting instead, but under Win2k8 I cannot find security settings "apply" for "authenticated users" so I cannot remove that setting, there's only "read" or "read and modify".
So two questions:
1. Why doesn't it work when using "computer settings"
2. What about that Security Filtering with removing "authenticated users" and using group-a instead?
T.
windows-server-2008-r2 group-policy
windows-server-2008-r2 group-policy
asked Feb 6 '14 at 17:07
user208383user208383
31114
asked Feb 6 '14 at 17:07
user208383user208383
31114
asked Feb 6 '14 at 17:07
user208383user208383
31114
asked Feb 6 '14 at 17:07
user208383user208383
31114
asked Feb 6 '14 at 17:07
user208383user208383
31114
31114
2
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22
add a comment |
2
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22
2
2
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22
add a comment |
3 Answers
3
active
oldest
votes
I just ran into the same problem. I had filtered the GPO with a security group with all of the computers I wanted this GPO to apply to. However, upon login the application wouldn't load. I ended up realizing it probably had something to do with me filtering out users, even though it doesn't set anything in users. I added authenticated users back, and everything works. I only have the computer version of this group policy setting set, but for some reason it needs filtering for both computers and users.
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
add a comment |
What I'm aiming for is obvious: Depending on the membership of group-a
I want to configure certain programs that should be started whenever a
user logs in.
It's bad idea: your programs will be launched in Local System context.
How to suggest above, you can use Loopback Processing.
But the work of this setting will affect all policies that apply to computers - please be careful with it.
And please note that the logon scripts can be processed with a significant delay (up to 15 minutes).
In my opinion the correct solution: use GPP to manage shortcuts in startup menu folder. Simply create a startup shortcuts.
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
add a comment |
I agree that loopback processing is the answer, but my understanding is it is a PER GPO setting so only the GPO in question applies that way.
I know in my environment that is how it works.
'This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. For example, computers in public areas, in laboratories, and in classrooms.'
Same link as above.
https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy
Add this setting to your existing GPO.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f573713%2fgpo-run-these-programs-at-user-logon-not-taking-effect%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
I just ran into the same problem. I had filtered the GPO with a security group with all of the computers I wanted this GPO to apply to. However, upon login the application wouldn't load. I ended up realizing it probably had something to do with me filtering out users, even though it doesn't set anything in users. I added authenticated users back, and everything works. I only have the computer version of this group policy setting set, but for some reason it needs filtering for both computers and users.
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
add a comment |
I just ran into the same problem. I had filtered the GPO with a security group with all of the computers I wanted this GPO to apply to. However, upon login the application wouldn't load. I ended up realizing it probably had something to do with me filtering out users, even though it doesn't set anything in users. I added authenticated users back, and everything works. I only have the computer version of this group policy setting set, but for some reason it needs filtering for both computers and users.
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
add a comment |
I just ran into the same problem. I had filtered the GPO with a security group with all of the computers I wanted this GPO to apply to. However, upon login the application wouldn't load. I ended up realizing it probably had something to do with me filtering out users, even though it doesn't set anything in users. I added authenticated users back, and everything works. I only have the computer version of this group policy setting set, but for some reason it needs filtering for both computers and users.
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
I just ran into the same problem. I had filtered the GPO with a security group with all of the computers I wanted this GPO to apply to. However, upon login the application wouldn't load. I ended up realizing it probably had something to do with me filtering out users, even though it doesn't set anything in users. I added authenticated users back, and everything works. I only have the computer version of this group policy setting set, but for some reason it needs filtering for both computers and users.
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
answered Aug 25 '15 at 19:53
aknewhopeaknewhope
82
82
add a comment |
add a comment |
What I'm aiming for is obvious: Depending on the membership of group-a
I want to configure certain programs that should be started whenever a
user logs in.
It's bad idea: your programs will be launched in Local System context.
How to suggest above, you can use Loopback Processing.
But the work of this setting will affect all policies that apply to computers - please be careful with it.
And please note that the logon scripts can be processed with a significant delay (up to 15 minutes).
In my opinion the correct solution: use GPP to manage shortcuts in startup menu folder. Simply create a startup shortcuts.
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
add a comment |
What I'm aiming for is obvious: Depending on the membership of group-a
I want to configure certain programs that should be started whenever a
user logs in.
It's bad idea: your programs will be launched in Local System context.
How to suggest above, you can use Loopback Processing.
But the work of this setting will affect all policies that apply to computers - please be careful with it.
And please note that the logon scripts can be processed with a significant delay (up to 15 minutes).
In my opinion the correct solution: use GPP to manage shortcuts in startup menu folder. Simply create a startup shortcuts.
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
add a comment |
What I'm aiming for is obvious: Depending on the membership of group-a
I want to configure certain programs that should be started whenever a
user logs in.
It's bad idea: your programs will be launched in Local System context.
How to suggest above, you can use Loopback Processing.
But the work of this setting will affect all policies that apply to computers - please be careful with it.
And please note that the logon scripts can be processed with a significant delay (up to 15 minutes).
In my opinion the correct solution: use GPP to manage shortcuts in startup menu folder. Simply create a startup shortcuts.
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
What I'm aiming for is obvious: Depending on the membership of group-a
I want to configure certain programs that should be started whenever a
user logs in.
It's bad idea: your programs will be launched in Local System context.
How to suggest above, you can use Loopback Processing.
But the work of this setting will affect all policies that apply to computers - please be careful with it.
And please note that the logon scripts can be processed with a significant delay (up to 15 minutes).
In my opinion the correct solution: use GPP to manage shortcuts in startup menu folder. Simply create a startup shortcuts.
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
answered Nov 14 '16 at 7:23
SlipeerSlipeer
2,97721329
2,97721329
add a comment |
add a comment |
I agree that loopback processing is the answer, but my understanding is it is a PER GPO setting so only the GPO in question applies that way.
I know in my environment that is how it works.
'This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. For example, computers in public areas, in laboratories, and in classrooms.'
Same link as above.
https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy
Add this setting to your existing GPO.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I agree that loopback processing is the answer, but my understanding is it is a PER GPO setting so only the GPO in question applies that way.
I know in my environment that is how it works.
'This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. For example, computers in public areas, in laboratories, and in classrooms.'
Same link as above.
https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy
Add this setting to your existing GPO.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I agree that loopback processing is the answer, but my understanding is it is a PER GPO setting so only the GPO in question applies that way.
I know in my environment that is how it works.
'This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. For example, computers in public areas, in laboratories, and in classrooms.'
Same link as above.
https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy
Add this setting to your existing GPO.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I agree that loopback processing is the answer, but my understanding is it is a PER GPO setting so only the GPO in question applies that way.
I know in my environment that is how it works.
'This policy directs the system to apply the set of GPOs for the computer to any user who logs on to a computer affected by this policy. This policy is intended for special-use computers where you must modify the user policy based on the computer that is being used. For example, computers in public areas, in laboratories, and in classrooms.'
Same link as above.
https://support.microsoft.com/en-us/help/231287/loopback-processing-of-group-policy
Add this setting to your existing GPO.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered yesterday
RECREC
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered yesterday
RECREC
62
answered yesterday
RECREC
62
62
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
REC is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f573713%2fgpo-run-these-programs-at-user-logon-not-taking-effect%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
2
loopback processing...btw, is your group-a a group of computers or users? I'm assuming users.
– TheCleaner
Feb 6 '14 at 17:21
I'm sorry, I don't understand "loopback processing". Should that tell me something? The group is a global security group. The group members are only computers.
– user208383
Feb 7 '14 at 7:07
Thank you for that hint. I digged a little deeper and found that the default domain polica sets "run these programs at user logon". I expected that both settings would become active so that the program to be started from the default domain policy AND my new GPO would become active, but it seems the default domain policy exclusively "wins" so to say. I will have to take a deeper look into this. But now I know what to look for. Thanks again!
– user208383
Feb 7 '14 at 12:22