Re: Policies having no effect on XP workstation

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 02/19/04 

Date: Thu, 19 Feb 2004 11:42:58 -0700

Maurice,

The convergence time for GPOs can vary dramatically. You need to consider
replication in the site, and inter-site as well. If you have multiple sites,
that are chained together, it can take hours for some clients to see the
changes. Also, the initial change is made to the PDC emulator DC, so it
starts here and replicates outward. 

-- 
Derek Melber
"Maurice Reed" <anonymous@discussions.microsoft.com> wrote in message
news:1350f01c3f707$f4e13ee0$a501280a@phx.gbl...
> Having investigated further I realised it was the DNS
> settings on the PC at fault. The PC had been used on our
> main domain(same IP subnet)and had our main Internet
> server as its preferred DNS. Once I changed that to point
> to the W2K3 server the policies started working. Just to
> prove it I made some changes to the policy settings and
> they were reflected on to the PC.
>
> One thing though, when a change is made on the server to
> some of the policy settings how long should it be before
> they come into effect? I found that if I made a change and
> then logged the PC off and back on again the changes were
> not in effect. If I logged off and then logged back on
> sometime later the changes took effect.
>
> cheers
>
>
> >-----Original Message-----
> >Did you setup policies in GPOs that are linked to BOTH of
> the OUs? remember,
> >policies apply to users OR computers, depending on which
> portion of the GPO
> >you have configured.
> >
> >-- 
> >Derek Melber
> >
> >"Maurice Reed" <anonymous@discussions.microsoft.com>
> wrote in message
> >news:11e9601c3f63c$07cafcc0$a301280a@phx.gbl...
> >> Hi, I am soon to upgrade to Server 2003 from NT4 on a
> LAN
> >> that needs restricted desktops.
> >>
> >> I have downloaded and installed GPMC and also downloaded
> >> the CommonScenarios from MS too. I have taken an XP
> >> workstation and added it to the test domain and got the
> >> usual 'welome to xyz domain' message. On the server I
> >> opened up AD Users & Computers and could see the
> computer
> >> in the computers folder so moved it to:- Common
> Scenarios-
> >> >Computers->Highly managed->Taskstation.
> >>
> >> I then created a test user in the Common Scenarios-
> >Users-
> >> >Highly managed->Taskstation Container.
> >>
> >> I enabled the policies and then logged in as the test
> user
> >> on the test PC and the policies have NO effect
> whatsoever!
> >>
> >> Obviously I have missed something but have gone through
> >> the properties of the user, PC and both policies to
> >> checked everything looks ok but no joy.
> >>
> >> I am getting desparate as next week I will be going live
> >> with 12 XP workstations on a W2003 server and must get
> the
> >> desktops locked down as they will be used by students.
> >>
> >> TIA
> >
> >
> >.
> >

Relevant Pages

  • RE: IIS and Active Directory questions.
    ... necessary permissions and security policies. ... Computer From The Network" and "Log On Locally" policies? ... | I have a Windows 2000 server with Active directory. ... | in AD so they can only log on to specific computers. ...
    (microsoft.public.inetserver.iis.security)
  • 2003 server, GPOs, admin lockdown
    ... I assumed that GPOs only apply to everything below the linked OU and that loopback only takes effect if the computer/user GPO containing the loopback is invoked. ... "What happened next" suggests that if loopback/merge is enabled *anywhere*, it applies to *all* computers and users. ... A new GPO was linked to a 4th level OU containing 10 XP Pro domain members, user policies were defined and loopback/merge enabled to apply those policies to users logging onto any of the 10 computers. ...
    (microsoft.public.windows.group_policy)
  • Re: Policies having no effect on XP workstation
    ... Did you setup policies in GPOs that are linked to BOTH of the OUs? ... policies apply to users OR computers, depending on which portion of the GPO ... > I then created a test user in the Common Scenarios->Users- ...
    (microsoft.public.windows.group_policy)
  • Re: GPO extension
    ... We want to sign our application policies. ... Do you have an idea about how I can sign my GPOs? ... Mark Heitbrink - MVP Windows Server - Group Policy ...
    (microsoft.public.windows.group_policy)
  • Re: Long Delay at Boot Time while "Applying Security Policies"
    ... You might check the number of policies being applied ... DNS for AD ... Single server, single domain. ... > Over the past month or two, many of the computers take exceedingly long ...
    (microsoft.public.windows.server.dns)