Re: Policies doesn't apply to my users and computers

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 05/06/04


Date: Thu, 6 May 2004 11:17:03 +0400

Are you using Windows 2000 pro SP4 as a client OS? Certain policy elements
would only apply if you have at least a specific service pack level (for
example, screensaver policy). You can check this in the definition of the
policy element in the GPO - there is always a minimum OS and SP requirements
for the policy.

Also, you might want to check the permissions on the GPO - by default,
Authenticated Users principal is granted both "Read" and "Apply policy"
permissions. If effective permissions for your user (or computer) account
are set so it does not have "Read" or "Apply policy" allowed, the policy
will not be applied, of course.

You can also try troubleshooting tools such as gpresult to check if the
policy actually applied.

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Gabriel" <gabricos@-NOSPAM-Argentina.Com> wrote in message
news:uGCYmsqMEHA.892@TK2MSFTNGP09.phx.gbl...
  From User configuration --> Administrative Templates --> Desktop:
  Hide all icons on Desktop = enable
  From User configuration --> Administrative Templates --> Control Panel:
  Disable Control Panel = enable
  None of the policies were applied, I still can get to Control panel and I
  see all icons on desktop.
  What could it be?
  Thanks...
  -- 
  .
  "Dmitry Korolyov [MVP]" <d__k@removethispart.mail.ru> escribio en el
mensaje
  news:u9cVdBnMEHA.3012@tk2msftngp13.phx.gbl...
  OK, but which policies did you define?
  -- 
  Dmitry Korolyov [d__k@removethispart.mail.ru]
  MVP: Windows Server - Active Directory
  "Gabriel" <gabricos@-NOSPAM-Argentina.Com> wrote in message
  news:entNxWiMEHA.2736@TK2MSFTNGP11.phx.gbl...
  Hello, I'm new in configuring active directory and obviously, as expected,
  have a problem.
  From what I'd read the group policies apply to users and computers inside
a
  Domain, Site or OU.
  I have already installed a windows 2000 server with Active Directory and
it'
  s working fine but.
  In my "Active Directory Users and computers" snap-in, in the root of my
  domain name I'd define a new OU called "TestOU" and from the properties
tab
  linked a new GPO called "TestOU GPO" and configured it.
  After that I'd define a user ("User1") inside "TestOU" who by default is a
  member of "Domain Users" (Group predefined in the Users container).
  I logged in the domain as User1 (from a windows 2000 Pro) to verify that
the
  policies worked right but none of them were apply.
  I try defining the computer inside the OU but it didn't work either.
  I started changing the options like "No Override" and "Block Policy
  inheritance" and no result were found.
  Can somebody tell me what am I doing wrong?
  Thanks in advance.
              Gabriel


Relevant Pages

  • Re: Group polices not getting implemented on XP professional
    ... I have tried the things but still not getting policies on clients, ... Tahnks & Regards ... This setting should be found on the XP machine under the local policy. ... Upgrading Windows 2000 Group Policy for Windows XP ...
    (microsoft.public.win2000.active_directory)
  • Windows Shortcut Keys and "ALT+TAB" not working because of GPO
    ... We've got an issue with a machine policy which prohibits us of using Windows ... Deny access to this computer from the network Support_388945a0, ... Policy Setting ...
    (microsoft.public.de.german.windowsxp.gruppen.richtlinien)
  • Re: Windows 2003 Server - Group Policy
    ... Group Policies refresh time is 90-minute intervals by default. ... For Windows 2000 Computers see the follow KB: ... Policy Inheritance can be set to this OU it means no policies from higher ... You can also set No Override to a particular GPO. ...
    (microsoft.public.win2000.active_directory)
  • Re: GP errors
    ... Then later shutdown second one and start the first one. ... machine (MTCCSAPROUTER) to the domain and those errors are not coming. ... The policy for which it is giving access denied error is the Default ... Windows cannot query for the list of Group Policy objects. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Important information about XP SP2 .ADM Files
    ... The Windows 2000 fix is available here: ... >> your attention to an important issue related to Group Policy. ... >> an important issue around the use of the .ADM files we ship with XP SP2. ...
    (microsoft.public.windows.group_policy)

Quantcast