|
Posted by Roger Abell [MVP] on November 10, 2006, 5:07 am
Please log in for more thread options
> Hello
>
Hi
>
> I have an Ad-environment with 2 Windows 2003 SP1 eng server and some
> Windows
> 2003 SP1 eng member server.
> I have applied some EC-server policy from Microsoft document from april
> 2006.
>
The templates only, or the settings from non-templated guidance also ?
You are aware (?) the templates are suggested settings to serve as starting
points for making working templates for a specific deployed infrastructure?
>
> On Domain root I have applied EC-Domain.inf
> On Domain Controller OU I have applied EC-Domain Controller.inf
> On Member Server OU I have applied EC-Member Server Baseline.inf
> On sub OU Web OU I have applied EC-IIS server.inf
>
Sensible. However, you could benefit by integrating some settings
from Bastion, particularly for Member, and sub-Member OUs.
> I joined 2 new web-servers to the domain and put them in the default
> Computer OU. Lets call them lt104 and lt135 as servername.
>
> Now my problems starts
>
> If I from DC run My Computer > Manage > Connect to another computer,
> select
> server104 see errors in word file.
>
Which errors specifically? (i.e. not what does not work, but precisely what
are you told of the problems?).
Is this so _only_ with 104 ? (i.e. you try 135 or any other in that OU and
OK?)
> If I from a member server that lies in Web OU run MBSA against all server
> in the domain I get errors from scanning lt104 se word file
>
> If I move the server lt104 to Web OU, none of the above errors occur. But
Did I miss a list of error messages?
> the server lt104 needs to connect to a standalone server to get picture
> and
> I cant connect to that standalone server if lt104 is in the Web OU but it
> works if it lies in Computer OU.
>
>
> Any ideers whats causing this problem
>
Mikael,
It sounds like you could fairly simply use the GPMC resultant policy
capability to get reports on the effective settings when in each of the
two locations and compare these for their differences.
www.microsoft.com/gp
Roger
|