GPO 被過濾掉 - BGinfo 報告的網域錯誤

2024-6-24 • tag-icon

我正在嘗試尋找我遇到的群組原則部署問題。

問題是與域相關的 GPO 被過濾掉了。我們最近將網域名稱重新命名為：康托索至：lan.CONTOSO.com（Netbios 名稱為：CONTOSO且未更改）。

我開始調查，問題的第一個跡像是運行 BGinfo 時 - 我們仍然在登入網域和機器領域：CONTOSO而不是我認為我想看到的：lan.CONTOSO.com

如果我運行：GPresult，我看到的網域是：lan.CONTOSO.com（以及正確的 DC、OU 值）

所有電腦（包括 DC）都會出現此錯誤

那麼：我應該在 BGinfo 報告中看到什麼？以及如果錯誤的話如何修復。

編輯：

以下是： gpresult /h 結果

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 24/11/2014 at 11:37:00 AM

RSOP data for CONTOSSO\user.admin on LTLVADMIN1407 : Logging Mode
---------------------------------------------------------------------

OS Configuration:            Member Workstation
OS Version:                  6.1.7601
Site Name:                   SiteIL
Roaming Profile:             N/A
Local Profile:               C:\Users\user.admin
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=LTLVADMIN1407,OU=Laptops,OU=Default,OU=CONTOSSO_Computers,DC=lan,DC=CONTOSSO,DC=com
Last time Group Policy was applied: 24/11/2014 at 10:06:21 AM
Group Policy was applied from:      DC3.lan.CONTOSSO.com
Group Policy slow link threshold:   500 kbps
Domain Name:                        CONTOSSO
Domain Type:                        Windows 2000

Applied Group Policy Objects
-----------------------------
    Default Domain Policy
    SpiceWorks Firewall
    Firewall - Disabled
    Printers
    Sophos Tasks Enabler
    Logon - Enable Verbose State
    WSUS - Default

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
    Local Group Policy
        Filtering:  Not Applied (Empty)

The computer is a part of the following security groups
-------------------------------------------------------
    BUILTIN\Administrators
    Everyone
    SQLServerMSSQLServerADHelperUser$LTLVADMIN1407
    SophosUser
    BUILTIN\Users
    NT AUTHORITY\NETWORK
    NT AUTHORITY\Authenticated Users
    This Organization
    LTLVADMIN1407$
    System Mandatory Level


USER SETTINGS1
--------------
CN=ADMIN User,OU=IT_Department,OU=CONTOSSO_Users,DC=lan,DC=CONTOSSO,DC=com
Last time Group Policy was applied: 24/11/2014 at 11:05:04 AM
Group Policy was applied from:      DC3.lan.CONTOSSO.com
Group Policy slow link threshold:   500 kbps
Domain Name:                        CONTOSSO
Domain Type:                        Windows 2000

Applied Group Policy Objects
-----------------------------
    Default Domain Policy
    Drive Mappings
    Printers

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
    SpiceWorks Firewall
        Filtering:  Not Applied (Empty)

    Local Group Policy
        Filtering:  Not Applied (Empty)

    Sophos Tasks Enabler
        Filtering:  Not Applied (Empty)

    Logon - Enable Verbose State
        Filtering:  Not Applied (Empty)

    Firewall - Disabled
        Filtering:  Not Applied (Empty)

    WSUS - Default
        Filtering:  Not Applied (Empty)

The user is a part of the following security groups
---------------------------------------------------
    Everyone
    HelpLibraryUpdaters
    SophosUser
    SophosAdministrator
    BUILTIN\Users
    BUILTIN\Administrators
    NT AUTHORITY\INTERACTIVE
    CONSOLE LOGON
    NT AUTHORITY\Authenticated Users
    This Organization
    LOCAL
    High Mandatory Level

這是計算機上的 UserDnsDomain

C:\Users\user.admin>echo %UserDnsDomain%+
LAN.CONTOSO.COM+

我引用的 GPO 甚至沒有顯示在清單中：它是一個登入腳本，是一個使用者配置值。

在此輸入影像描述

政府採購局資訊

在此輸入影像描述

群組策略建模

我認為問題就在這裡，我的用戶名定義為：CONTOSSO\user 用戶容器定義為： lan.contoso.com\contoso_users。我需要的 GPO 也沒有顯示。

在此輸入影像描述

問題可能出在 Netbios 名稱？緩存值？

在此輸入影像描述

答案1

您需要將 GPO 連結到領域以及。

將您的 GPO 拖曳到您想要套用的網域（將廣告新增至「位置」）

在此輸入影像描述

答案1

相關內容