Why does a group policy not applied to the domain administrator account?

Posted by Saariko on Server Fault See other posts from Server Fault or by Saariko
Published on 2012-09-25T07:38:49Z Indexed on 2012/09/25 9:39 UTC
Read the original article Hit count: 410

I have a working policy on my entire domain. I just found out, when logging with the domain administrator, that this policy is not applied (EDIT: Running : gpresult shows that the GPO's are applied - but, this GPO is for Drive Mappings, and the actual drive mappings are NOT shown)

  • The administrator account - does not have any login script on his profile tab.

  • My GPO's are mainly small/atomic settings: single GPO to handle each settings: UAC, Firewall, printers.

  • GPO status for the object is enabled

That's an overview of the Drive Maps:

enter image description here

Reading on MS support site, I checked the delegation tab, and it is marked as applied to domain and enterprise admins.

enter image description here

Every user gets these policies correctly.

The OU that is set is the root of the domain. (for testing purpose - I did that to eliminate hierarchy issues - did not help)

  • Block Inheritance is disabled. (never used it anyway)

GPO link

enter image description here

GPO Security Filterings

enter image description here

© Server Fault or respective owner

Related posts about windows-server-2008-r2

Related posts about group-policy