Only Some IP Security and User Rights Policy Settings Are Applied

You configure IP Security and Users Rights Assignment Group Policy settings in various Group Policy objects, and when a user managed by some or all of these Group Policy objects logs on, only some of the expected IP Security and Users Rights Assignment Group Policy settings are applied.

Possible Causes:

Some Group Policy extensions have different application rules. These extensions do not merge Group Policy settings from various Group Policy objects, but always use the last written setting.

Diagnostic Tests:

In most situations, if a Group Policy extension has been configured in more than one Group Policy object for a user or computer, the configuration settings are merged from all the Group Policy objects that contain settings for that Group Policy extension.

For example, if you apply two Group Policy objects to a user, and the first Group Policy object enables Software Deployment and assigns an application, and the second Group Policy object assigns another application, the user receives both applications.

IP Security and Users Rights Assignment are Group Policy extensions that are exceptions to this rule. They always use the last written setting. Therefore, when troubleshooting the resulting set of Group Policy, identify Group Policy objects that contain settings within these two extensions. You can check to see if either of these extensions is enabled or configured on your client by running Gpresult.exe in verbose mode.

© 1985-2000 Microsoft Corporation. All rights reserved.