Mark Minasi's Tech Forum
Register Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #1 
Domain Control 1 Type Windows 2000 Domain Control 2 Type Windows 2008 or Later

Would this cause issues with why my GPO is not working?



Regards,

Charles Burch
0
donoli

Senior Member
Registered:
Posts: 598
Reply with quote  #2 
Is there a problem w/ all GPOs? Are there any error msgs? Is there anything in the event viewer?
0
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #3 
No there is not a problem with all GPOS seems to only be effecting ou other than default?
0
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #4 
no errors that I am aware of.  also same for event viewer?
0
donoli

Senior Member
Registered:
Posts: 598
Reply with quote  #5 
https://serverfault.com/questions/120472/win2008-dc-in-a-windows-2000-domain-can-i-keep-the-old-dc

That's the closest thing that I've found that might help.
0
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #6 
All Domain controls 2012R2?


0
wobble_wobble

Avatar / Picture

Associate Troublemaker Apprentice
Registered:
Posts: 887
Reply with quote  #7 
GPO's can get blocked for all sorts of reasons.
AD FFL or DFL makes no difference.

Does it effect all OU's, some or just one?
New PC's/ new pc builds?
New AV/ IPS/ IDS/ Management/ Monitoring solution?
New software firewall or modified Windows Firewall?

What happens if you run GPO Results against a user or computer account in an affected OU?



__________________
Have you tried turning it off and walking away? The next person can fix it!

New to the forum? Read this
0
Pieter

Avatar / Picture

Senior Member
Registered:
Posts: 215
Reply with quote  #8 
Hi Charles,
Do you have a specific problem, if so, can you clarify a bit ?
Or are you just asking out of interest ?

__________________
Pieter Demeulemeester
0
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #9 
The problem is when I run gpresult /r my OU policy for CPU called local adam desktop and WSUS is not applying.

Also on the GPreult /r It shows
Domain Control 1 Type Windows 2000 Domain Control 2 Type Windows 2008 or Later?
0
wobble_wobble

Avatar / Picture

Associate Troublemaker Apprentice
Registered:
Posts: 887
Reply with quote  #10 
Run either the powershell or CLI commands

# Get Domain Functional Level using PowerShell:
Get-ADDomain | fl Name,DomainMode

# Get Forest Functional Level using PowerShell:
Get-ADForest | fl Name,ForestMode

# Get Forest Functional Level using dsquery:
dsquery * “CN=Partitions,CN=Configuration,DC=lab,DC=local” -scope base -attr msDS-Behavior-Version

# Get Domain Functional Level using dsquery:
dsquery * “DC=lab,DC=local” -scope base -attr msDS-Behavior-Version ntMixedDomain

Then tell us the FFL and DFL

When you open GP Management, what happens if you run GPO Results against a user or computer account in an affected OU?



__________________
Have you tried turning it off and walking away? The next person can fix it!

New to the forum? Read this
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.