Re: policies not applying

From: Mike Finch (smiffinch_at_hotmail.com)
Date: 03/02/04


Date: Tue, 2 Mar 2004 03:15:57 -0800

Thanks for this.

Unforunately, all other policies are working fine; all
clients are pointing to internal DNS server; GPresult
shows that the policy is being applied even though it has
no effect.

It's a mystery!

Mike

>-----Original Message-----
>Hard to say, may be a DNS problem. Are no policies
working? Make sure all
>your clients are pointing to your internal DNS server.
Also run gpresult
>from a command prompt on a client to see what, if any,
policies are being
>applied.
>
>"Mike Finch" <smiffinch@hotmail.com> wrote in message
>news:314901c3fd27$bb0b7cf0$a401280a@phx.gbl...
>> We have a native mode W2K domain (originally installed
as
>> an in-place upgrade from an NT4 domain) with W2k servers
>> and W2k pro, XP pro and NT4 SP6a clients.
>> There are two group policies that are not getting
applied.
>> Windows Update always gets "Access Denied" when you
visit
>> the URL; I've applied a policy at domain level to
disable
>> the "Remove access to Windows Update" but it doesn't
make
>> any difference. You have to manually change the registry
>> (HKCU\Software\Microsoft\Windows\Current
>> Version\Policies\Explorer\nowindowsupdate) on each and
>> every machine in the domain to access the url in IE.
>> Secondly, there's a folder redirection policy to
>> redirect "My Documents" to \\servername\%username% which
>> seems to apply to user accounts within domain admins
>> groups using W2k Pro and pleb clients running XP pro but
>> not other pleb W2k Pro clients.
>> The "Apply Group Policy" permission is set to apply to
all
>> authenticated users on both problem GPOs. I've tried "No
>> Override" I've tried removing the policy altogether and
>> applying the settings in the "Default Domain" policy and
>> the "Default Domain Controllers" GPO - all to no effect.
>> Any ideas anyone?
>> Thanks...
>> Mike
>
>
>.
>



Relevant Pages

  • Re: How to Import XP SP2 ADM
    ... The policies you already have in place will remain for clients and all new ... The adm file will not achieve that. ... Block policy inheritence stops policys above it in the OU stucture from ...
    (microsoft.public.win2000.active_directory)
  • Re: XP slow login on 03 domain & linked GP question
    ... Have you run rsop.msc on one of those XP clients to see which policies are ... I suspect that you are probably getting some policy after all ... You can also enable verbose "userenv" logging ...
    (microsoft.public.windows.group_policy)
  • Re: XP slow login on 03 domain & linked GP question
    ... Have you run rsop.msc on one of those XP clients to see which policies are ... I suspect that you are probably getting some policy after all ... You can also enable verbose "userenv" logging ...
    (microsoft.public.windows.server.networking)
  • Re: Home Page URL Group Policy
    ... One, I want to define proxy per site, not per domain, and I want to set the home page globally, without applying it to the servers at those sites. ... I am trying to apply the Home Page URL and Proxy policies with a policy per site. ... But doing so at the client level, rather than the site level, so I leave the server ou per site out of the policy. ... Have a look at the eventlogs of the clients, maybe they show you what went wrong. ...
    (microsoft.public.windows.group_policy)
  • Re: Slow logon
    ... Is it possible that group policy could be ... slowing the PC down that much on logon? ... > You *have* to use the internal DNS server for internal clients. ...
    (microsoft.public.win2000.active_directory)