为什么 GPO 不适用于计算机配置,但适用于用户配置

为什么 GPO 不适用于计算机配置,但适用于用户配置

我是初学者,正在使用新的域服务器 2012r2,除了一点之外,一切都运行正常,我不太明白为什么会发生这种情况,我在用户配置节点上所做的所有配置都适用,但当涉及到计算机配置时,什么都不适用

我搜索后发现我必须运行该命令gpresult,并从下面的输出中发现

Basic Group Policy我已经应用了用户配置仅有的

Default Domain Policy当我激活域服务时默认创建的仅适用于计算机配置,这确实是一个有线问题,计算机默认链接到此 GPO,而用户没有,需要手动链接,我也不明白为什么它会默认创建? 它有什么帮助?

为什么我的Basic Group PolicyGPO 没有应用到计算机配置上我尝试强制执行该 GPO 但这对我没有帮助

另一个相关问题是激活域服务时默认创建的这两个 GPO 重要吗?我可以删除它们吗?如果我删除它们会有什么影响?

我知道有很多问题,但希望有人能帮助我搜索,我感到困惑,非常感谢你的帮助

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\it_sam>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 05/23/2018 at 13:31:52


RSOP results for BNK\it_sam on TestPC002 : Logging Mode
------------------------------------------------------------

OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 BNK
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:
Local Profile:               C:\Documents and Settings\it_sam
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
    CN=TestPC002,CN=Computers,DC=BNK,DC=net
    Last time Group Policy was applied: 05/23/2018 at 13:16:49
    Group Policy was applied from:      SRV3.BNK.net
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)

    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        NT AUTHORITY\Authenticated Users


USER SETTINGS
--------------
    CN=Samer Jama Al-Deen,OU=OU - Basic Security Policy,DC=BNK,DC=net
    Last time Group Policy was applied: 05/23/2018 at 13:17:02
    Group Policy was applied from:      SRV3.BNK.net
    Group Policy slow link threshold:   500 kbps

    Applied Group Policy Objects
    -----------------------------
        Basic Group Policy

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Default Domain Policy
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL


C:\Documents and Settings\it_sam>

答案1

这就是组策略对象作品:

请注意,策略设置分为影响计算机的策略设置和影响用户的策略设置。与计算机相关的策略指定系统行为、应用程序设置、安全设置、分配的应用程序以及计算机启动和关闭脚本。

计算机配置设置仅适用于计算机对象,而用户配置设置适用于用户对象。

计算机配置在组策略中,您可以设置应用于计算机的策略,无论谁登录到计算机。

这些引文来自 Windows 2003 时代的旧资料,但我在当前文档的任何地方都找不到重复的内容。它可能是如此重要,以至于微软认为它无需再说了。

相关内容