GPOS and removing stale settings via GPO


Recommended Posts

Current Situation. New DC replacing old DC which is GONE no access to it what so ever.

So users have an old GPO setting for Folder Redirection. So the paths are now different on the new server. So create a new GPO it should take presidence and life should be good right? As long as your setting is not set to "not" configured it should be fine. Well when these users log off their old GPO setting with folder redirection and File syncing is still in place. So they get an error that states path cannot be found.

Besides going to each machine what way do you guys think I can force the machines to inherit policies from the new machine and not use the old.

One other google resource stated that I should just simply create a GPO that disables folder redirection and syncing have all users update then go back after this happens and force a new GPO that enables the correct path and it should remove the old tattooing.

Second situation is this weird NumLock issue.

Some Dell machines have NUMlock Enabled in the bios but when they get to windows no numlock when they go to log in. After they log in I have created a script that enables numlock but it doesnt apply till after they login. Since they use strong alpha numeric passwords they want the NUMlock enabled before they login.

Any ideas?

you are going to have to play with gpupdate on the pc's and use your rsop to be able to verify gpo changes.

to use gpupdate:

start

run

cmd

gpupdate

to force gpupdate:

start

run

cmd

gpupdate /force

to use rsop:

start

run

mmc

file

add/remove snap ins

add

resultant set of policy

right click resultant set of policy

generate rsop data

you are going to have to play with gpupdate on the pc's and use your rsop to be able to verify gpo changes.

to use gpupdate:

start

run

cmd

gpupdate

to force gpupdate:

start

run

cmd

gpupdate /force

to use rsop:

start

run

mmc

file

add/remove snap ins

add

resultant set of policy

right click resultant set of policy

generate rsop data

come on SC302 I got all these commands bud.. This is actually a known issue with folder redirect. The old ones stay stale. Im trying to find a way to remove it. The whole tattooing issue..

I ll see if I can come up with a work around.

do the new gpo's work on new computers? I apologize for that not being helpful, but if you are applying a new gpo it should show up in there. Esp if you are micromanaging your gpo's and not using 1 or 2 gpo's for everything (like putting everything in your default domain gpo).

My gpo structure is broken down like this:

default domain controller gpo

disable microsoft firewall gpo

redirect users folder gpo

push adobe acrobat gpo

push antivirus gpo

lock taskbar gpo

user logon script gpo

enable logoff in start menu gpo

You get the idea with that. I don't use 1 gpo to do all of that, it is broken up. If I make a change to the folder redirect I can delete the gpo, and create a new one and verify that the pc's then take the new one. I do not have the issue you do with this.

Edit: Also remember gpo's get applied top down when using in conjunction with ou's.

Edited by sc302
Why not? And then why not just name the new one the same name as the old?

Joel, Lots of Red tape. We had no access to the old dc. It was removed when we walked in and due to the other company managing the previous DC they wouldnt allow us to access it.. Bunch of BS.

SC302

Im with you, I always split up the GPO's, I usually have at least 10 on each server. Its just where the machines have some retained info in the reg poiting to an old method. The whole "tattooing" is what I keep coming across in Google.

The recent trouble I just had with folder redirection is that the machines want the old folder as a reference point to move FROM. You could always push the registry entries back to the defaults.

Back to my original question; why not just name the new machine and domain the same as the old? You don't need the old server to accomplish that. I can think of a host of GUID issues you may get, but it doesn't hurt to try as a step of solving your redirection problem.

  • 3 months later...
Wont the old ones be removed if you just goto the machine, make a local admin, remove its connection to AD by switching it to workgroup mode. Then just rejoin the new domain?

that is a lot of work (in comparison to other methods), and really not the best way to go around it. You are better off deleting the pointers in the registry.

HKLM->Software->Policies

HKLM->Software->Microsoft->Windows->CurrentVersion->Policies

HKCU->Software->Polcies

HKCU->Software->Microsoft->Windows->CurrentVersion->Policies

and if any exist delete the policies in here

%windir%\System32\GroupPolicy

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • The laptop in the bedroom is an Acer with i7-10510U CPU. Acer's website states they will not be upgrading it so I had little choice other than disable secure boot. I know next to nothing on these matters so hopefully it will be fine.
    • GitHub removes manual model selection from Copilot free and student plans by Karthik Mudaliar GitHub is removing the ability to manually select an AI model from its Copilot Free and Student plans, making its automatic routing system the default and only way to choose a model. This means users on these tiers will no longer be able to deliberately select a particular OpenAI, Anthropic, Google, or Microsoft model for a task. In its announcement, GitHub said Copilot Auto will dynamically choose what it considers the best model for each request. Free and Student accounts will retain access to models from multiple families, although the available selection will continue to depend on the restrictions attached to each plan. GitHub did not identify a fixed pool of models that Auto will always use, and its documentation warns that model availability can change over time. GitHub describes Auto as more than a random fallback system. On supported surfaces, its task-optimization technology evaluates the complexity of a request alongside real-time information about model health and availability. Straightforward prompts can be routed to faster and less expensive models, while more demanding coding tasks may be sent to higher-cost reasoning models. The company says this approach should reduce rate limiting, latency, and failed requests. Auto generally selects one model along natural prompt-caching boundaries rather than repeatedly switching models during a session, as GitHub found that mid-session changes increased costs without producing sufficient improvements in output quality. Users can still check which model generated a response. In Copilot Chat, the information appears when hovering over an answer, while Copilot CLI and the Copilot cloud agent display the selected model alongside their output. Auto is available in Copilot Chat, Copilot CLI, and the cloud agent, with the exact implementation and release status varying between supported development environments. The latest restriction follows several months of adjustments to Copilot’s individual plans. GitHub temporarily halted new Pro, Pro+, and Student subscriptions in April as it sought to manage demand and service reliability. It later introduced token-based billing and began gradually reopening individual-plan registrations on June 17. Alongside the picker change, GitHub is retiring the “Preview” label from Microsoft-developed models. It argues that the label is no longer necessary because Auto handles model routing and models are continuously updated behind the scenes.
    • Look up 'inflation' kid. Ask an AI for the numbers between both games.
    • Google reportedly set to lose two key Gemini and DeepMind researchers to Anthropic by Karthik Mudaliar Google is reportedly preparing to lose two more prominent artificial intelligence researchers, with Gemini contributors Jonas Adler and Alexander Pritzel planning to join rival AI developer Anthropic. According to a report from Bloomberg, both researchers are viewed internally as important contributors to Google’s flagship Gemini model family. Adler worked on Google’s AI coding efforts, while Pritzel was involved in the process used to train AI systems. Neither company has publicly confirmed the moves. The report also does not say when the researchers will formally leave Google or what positions they will hold at Anthropic. Training a large AI model requires decisions covering its architecture, data preparation, distributed computing infrastructure, and post-training methods that shape how the finished system behaves. Researchers with experience operating at the scale of Gemini are consequently difficult to replace quickly. Both Adler and Pritzel have previously contributed to Google DeepMind’s scientific research as well. They are listed among the authors of the company’s work on expanding AlphaFold protein-structure predictions across entire proteomes, alongside AlphaFold researchers including John Jumper. The reported departures arrive shortly after another important change within Google’s Gemini organization. Gemini co-lead Noam Shazeer is leaving Google for OpenAI, after returning to the search company in 2024 through its deal with Character.AI. Shazeer is particularly well known as one of the authors of the Transformer paper, whose architecture became the foundation for most modern large language models. Anthropic, meanwhile, has been recruiting recognizable figures from other leading laboratories. OpenAI co-founder and former Tesla AI director Andrej Karpathy joined Anthropic’s pre-training team in May. His move, followed by the reported recruitment of several Google researchers, suggests Anthropic is strengthening the research teams responsible for the core capabilities of future Claude models rather than concentrating solely on product and enterprise sales. The competition is complicated by the companies’ extensive commercial relationships. Anthropic competes directly with Google’s Gemini models, but it also relies on Google as an infrastructure partner. In April, Anthropic announced an expanded agreement with Google and Broadcom covering multiple gigawatts of next-generation Tensor Processing Unit capacity. TPUs are Google-designed accelerators used to train and run large AI models. via Bloomberg
  • Recent Achievements

    • One Year In
      Philsl earned a badge
      One Year In
    • Dedicated
      Scoobystu earned a badge
      Dedicated
    • First Post
      Tom Schmidt earned a badge
      First Post
    • One Month Later
      D0nn13 earned a badge
      One Month Later
    • Rookie
      +ChiefOfNeo went up a rank
      Rookie
  • Popular Contributors

    1. 1
      +primortal
      461
    2. 2
      +Edouard
      177
    3. 3
      PsYcHoKiLLa
      124
    4. 4
      Michael Scrip
      79
    5. 5
      Xenon
      76
  • Tell a friend

    Love Neowin? Tell a friend!