GP Not Applying to User SID

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: M. Farrenkopf (mattf*_at_aracnet.com)
Date: 02/28/05 

Date: 28 Feb 2005 22:30:03 GMT

I have two systems where the GPOs are propagating to the machine, but it
doesn't appear as though Windows (2000) is applying them as far as it
should.

Excerpt from winlogon.log (first machine):

----Configure User Rights...
        Configure S-1-5-32-544.
        Configure S-1-5-32-551.
        Configure S-1-1-0.
        Configure S-1-5-32-545.
        Configure S-1-5-32-547.

        User Rights configuration completed successfully.

Second machine:

----Configure User Rights...
        Configure S-1-5-32-544.
        Configure S-1-5-32-551.
        Configure S-1-1-0.
        Configure S-1-5-32-545.
        Configure S-1-5-32-547.
        Configure S-1-5-6.

        User Rights configuration completed successfully.

I've identified all of the SIDs above and understand they apply to various
groups. On all my other machines, it applies the policies down to the user
SID.

These two machines in question were used as guinea pig machines when we had
an earlier interaction between WinXP policies and Win2K policies. We ended
up removing the original GroupPolicy folder and replacing it with a
known-good copy. All permissions are set correctly when compared to a
known-good machine. Prior to this, both machines had been applying policies
correctly. Now, neither of them do.

This is in a Novell environment (NW6). The policies are applied through
ZEN. But I don't think Novell is the issue in this case because the policy
files are being updated in the folders correctly. They're just not getting
applied to the individual user SIDs.

Suggestions on where to look?

Thanks,
Matt 

-- 
==========================================================================
"Non-rechargeable batteries are not to be recharged." -- printed
  instructions under "Battery Tips" for a baby toy.