RE: User Policy set but no effect

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

First, check to make sure that the permissions of the policy are not
preventing the client machines from applying it. Default permissions for the
policy usually allow Read and Apply Policy to Authenticated Users, which
includes the machines.

Or else, try this...
On the computers that are not applying the policy, look in the
(hidden) folder C:\WINNT\security\templates\policies. There are several
files with extensions -
..dom
..inf

Check the attributes of each file. If the Read-only attribute is set,
delete all the files in that folder and refresh policy with secedit (or a
reboot). That should recreate the files without the Read-only attribute and
the policy should then be applied.


"SolRodriguez" wrote:

> What am I doing wrong? I tried to set a simple user policy at the domain
> level and even after refreshing on the server with secedit and forcing
> gpupdate on a client I don't see a change. Here's more details:
>
> I enforced a screen saver in the \\ default domain policy\user
> configuration\administrative templates\\control panel\display folder with
> ->Hide Screen Saver tab policy, Screen saver executable name policy
> (logon.scr), Password protect the screen saver policy, Activate screen saver
> policy, and Saver time-out policy.
>
> Went to command line and ran secedit /refreshpolicy user_policy. Nothing
> changed when I tested client machines by logging in. Client machines are XP
> or Win2000 Pro. Then I ran gpupdate /force on client machines. Still no
> changes after testing with new logins.
>
> I don't understand what I'm doing wrong. Thanks for any help.
>
> Sol Rodriguez
>
> --
> Computers and music geek. Too bad I'm good at music and it doesn't pay, but
> I'm lost with computers and it still pays.
> http://www.greenleafave.com
.

Relevant Pages

  • Re: Automated logoff using Winexit.scr
    ... If a non-administrative user attemps to use the WinExit screen saver, ... You can use RegDACL to set these permissions in batch. ... are not servers in our domain. ... I have tried creating a group policy ...
    (microsoft.public.windows.group_policy)
  • Re: group policy help
    ... I created the JJ policy and that is where I put the windows ... > update and my screen saver and a few other items, ... If you look at the permissions on the Default Domain Policy, ... Users" or any other group that contains your computer accounts for the ...
    (microsoft.public.windows.server.sbs)
  • Re: HOWTO Install security with CASPOL for UserControls
    ... I stated that new assemblies would be added rapidly over ... It is possible to distribute policy modifications over a network by various ... grant additional permissions on top of existing custom policy, ... your controls) require unrestricted permissions on client machines. ...
    (microsoft.public.dotnet.security)
  • Re: Dynamic dns problem
    ... Can I have such a policy for Windows 2000 Pro and Server machines? ... there might be client machines that I don't manage like home ... coomputers or customers that come to the office with a laptop or ... you can assign a policy to clear this check box. ...
    (microsoft.public.windows.server.dns)
  • Got it!
    ... Group Policy Managment Console I could see that I accidentally set ... > delete all the files in that folder and refresh policy with secedit (or a ... >>, Password protect the screen saver policy, Activate screen saver ... >> changed when I tested client machines by logging in. ...
    (microsoft.public.win2000.group_policy)