Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I have 1 OU and some other leaf OU as user,groups,computers and servers. Under servers I have al my servers. Then the servers have just one gpo that is the domain policy. The servers have applied the domain gpo as it should be. But there is one that have only one group under the "log on as service" policy. If I run gpo result it show me that the server should have just one group and it look that it apply the policy correctly. But for my logic it should have two groups... what's happening ?

share|improve this question
Where does the resultant set of policy show that setting as coming from? – Shane Madden Oct 2 '13 at 17:13
Do you have any SCECLI errors in your event log? Perhaps with an error 0x534? See: – Zoredache Oct 2 '13 at 18:24
ok, it should be resolved. I dont know why the kaspersky antivirus would have blocked the gpo apply. – Luigi Oct 3 '13 at 9:54

Kaspersky blocks gpo application. Do not know why.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.