New Windows 2008-R2 Domain with default settings (so far).
New GPO with firewall settings is NOT being applied on XP workstations. (This is a pristine Domain except for this addition; there are no other non-default policies, no special settings like no override nor block inheritance.)
TO TEST: Created a LogonScript (user) and a StartUpScript (computer) that each log the startup of the computer or the logon of users with date and time to prove whether GPOs are running.
Group policy computer settings not being applied on Windows XP sp3 workstations. GPO Logon script for USER is correctly writing the log file; script for COMPUTER IS NOT writing log file on the XP workstations.
Domain controller WILL run BOTH computer and user scripts so we know the script "functions" as designed, is located in the right place etc.
We know the GPO is correctly configure for two reasons: The User portion runs even on the XP Machine and both portions run on the DC.
USER SETTINGS (getting applied from 'OurDomain_Domain_Default' GPO)
--------------
CN=Migration Operator,OU=OurName Service Accounts,DC=OurDomain,DC=OurTag,DC=com
Last time Group Policy was applied: 5/24/2013 at 1:02:42 PM
Group Policy was applied from: DC1.OurDomain.OurTag.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
OurDomain_Domain_Default
BUT: Computer settings NOT getting the GPO at all (apprently):
COMPUTER SETTINGS
------------------
CN=303-026479,OU=OurName Workstations,DC=OurDomain,DC=OurTag,DC=com
Last time Group Policy was applied: 5/24/2013 at 12:56:44 PM
Group Policy was applied from: DC1.OurDomain.OurTag.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
N/A
FULL GPO POLICIES follow:
GPResult /z on the computer
================================
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 5/24/2013 at 1:20:34 PM
RSOP results for OurDomain\MigOp on 303-026479 : Logging Mode
-----------------------------------------------------------
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: OurDomain
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\MigOp
Connected over a slow link?: Yes
COMPUTER SETTINGS
------------------
CN=303-026479,OU=OurName Workstations,DC=OurDomain,DC=OurTag,DC=com
Last time Group Policy was applied: 5/24/2013 at 12:56:44 PM
Group Policy was applied from: DC1.OurDomain.OurTag.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
N/A
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Local Group Policy
Filtering: Not Applied (Empty)
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
NT AUTHORITY\Authenticated Users
Resultant Set Of Policies for Computer:
----------------------------------------
Software Installations
----------------------
N/A
Startup Scripts
---------------
N/A
Shutdown Scripts
----------------
N/A
Account Policies
----------------
N/A
Audit Policy
------------
N/A
User Rights
-----------
N/A
Security Options
----------------
N/A
Event Log Settings
------------------
N/A
Restricted Groups
-----------------
N/A
System Services
---------------
N/A
Registry Settings
-----------------
N/A
File System Settings
--------------------
N/A
Public Key Policies
-------------------
N/A
Administrative Templates
------------------------
N/A
USER SETTINGS
--------------
CN=Migration Operator,OU=OurName Service Accounts,DC=OurDomain,DC=OurTag,DC=com
Last time Group Policy was applied: 5/24/2013 at 1:02:42 PM
Group Policy was applied from: DC1.OurDomain.OurTag.com
Group Policy slow link threshold: 500 kbps
Applied Group Policy Objects
-----------------------------
OurDomain_Domain_Default
The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Default Domain Policy
Filtering: Not Applied (Empty)
Local Group Policy
Filtering: Not Applied (Empty)
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Domain Admins
NDS Migrator Users
Denied RODC Password Replication Group
Resultant Set Of Policies for User:
------------------------------------
Software Installations
----------------------
N/A
Public Key Policies
-------------------
N/A
Administrative Templates
------------------------
N/A
Folder Redirection
------------------
N/A
Internet Explorer Browser User Interface
----------------------------------------
N/A
Internet Explorer Connection
----------------------------
N/A
Internet Explorer URLs
----------------------
N/A
Internet Explorer Security
--------------------------
N/A
Internet Explorer Programs
--------------------------
N/A