Re: Local Group Policy Not working in Windows 2003

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 07/17/04 

Date: Fri, 16 Jul 2004 19:42:20 -0700

Let us say your domain is named "thisdomain.com"
Can you browse to \\thisdomain.com\sysvoll\policy ?
What you sketch could be caused by invalid DNS support:
either client not using your DNS, or your DNS not holding
needed records.
In the option support tools install you will find netdiag
Run netdiag on your DC and then also on your client
and see what failures it reports 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"Jackie" <mike_jackie@hotmail.com> wrote in message 
news:2eb6001c46b3f$5a635ef0$a301280a@phx.gbl...
> OK here's the situation.
>
> I have a windows 2003 server that was upgraded from NT.
> The processes was installing windows NT into the new
> server and upgrading to windows 2003 and promoting it as
> the primary domain controller. Everything was working
> fine since all the workstation was all still in windows
> 98. Now we have decided to upgrade the workstation to
> windows xp, this is when we start encoutering all this
> problem. Our local group policy does not work.
>
> Steps that i have taken are:
> 1. I have created a new OU and created a user in it. To
>    test wheter the fault was in the migrated user. (user
>    from NT to Win 2003) Then i tried login in the clients
>    workstation, the group policy didn't work.
>
>    I created a user security group and have given it a
>    permission to have full control. Just to test. Login
>    to the clients workstation and nope the group policy
>    did not work.
>
>    I have even made this group us "member of" "users".
>
> 2. This time i created a user within the "user" container
>    i thought this time it will be using the default
>    domain policy. Just to see if its really working, I
>    edited the group policy by adding a "url" address.
>    Then, i login in the clients workstation to test it
>    the changes and there was no change. Again the group
>    policy didn't change.
>
>    Then, i login again in the clients workstation but
>    this time as the administrator. And again the group
>    policy didn't work. But if im on the server the "url"
>    address that i put in works.
>
> NOTE: Each time i made changes on the group policy I type
> gpupdate /force on the server and log-off on the clients
> workstation and login again. At one stage i even
> restarted the server.
>
> 3. I also checked the event viewer after i updated the GPO
>   and it says GPOs updated successfully. But the GPO
>   still not working.
>
> 4. I type in "Gpresult" and the message is:
>
>  RSOP data for domainName\administraotr on SVRName:
>        Logging Mode
>  ___________________________________________________
>
>  OS Type: M/soft Windows Server 2003 Standard Edition
>  OS Config: PDC
>  OS Version: 5.2.3790
>  Terminal SErver mode: Remote Administration
>  Site Name: Default-first-site
>  Roaming profile:
>  Local profile: c:\winnt\profiles\administrator
>
>  USER SETTINGS
>  -------------
>  CN=Administrator, CN=Users, DC=cebuss, DC=qld,
>   DC=edu, DC=au
>  Last time GP was applied:  [date]
>  GP slow link threshold: 500kbps
>  Domain Name: mabolo
>  Domain Type: Windows 2000
>
>  Applied Group Policy Objects
>  ----------------------------
>      Default Domain Policy
>
>  The following GPOs wer not applied because they were
>    filterd out
>  -----------------------------------------------------
>       Local Group Policy
>             Filtering: Not Applied <Empty>
>
>  The computer is a part of the following security groups
>  -------------------------------------------------------
>     Builtin\administrators
>     Everyone
>     Builtin\Pre-window2000 compatible Access
>     Builtin\users
>     Windows authorization access group
>     Nt authority\network
>     nt authority\authenticated users
>     This Organization
>     [ServerName]
>      Domain Controllers
>
> 5. Then I installed GPMC, and i found the GPO for my user
>   wasn't enforce, so i enforce the GPO. Went in the
>   clients workstation and the GP still didn't work.
>
>
> Note: Even within the XP machine i can browse the network
> no problem at all. I can to to the internet provided that
> i specify the autoproxy address.
>
> Any suggestions will be much appreciated. I will try
> everything and anything ....
>
> Cheers,
> Jackie
>
>

Relevant Pages

  • Re: Group Policy via VPN
    ... Speed Group Policy Troubleshooting with the NEW GPHealth Reporter tool at ... I have a scenario where a branch office has a couple of Windows XP SP2 ... clients that connect to HQ via a site-to-site VPN connection. ... getting mapped drives via AD user account properties. ...
    (microsoft.public.windows.server.active_directory)
  • Unable to use Group policy logon....
    ... We have a new Windows 2003 AD and will be using new Windows XP clients. ... All group policy settings work and are distributed to the clients. ...
    (microsoft.public.windows.server.scripting)
  • Re: 2000 Server with XP Clients -- Policy problem
    ... Is there an idiots guide to setting up Group policy for domain users ... I can do it in Windows 2003 without any problems, ... Open Active Directory Users and Computers ... I see that for Windows XP clients working off a Windows 2000 server one ...
    (microsoft.public.win2000.group_policy)
  • Re: Local Group Policy Not working in Windows 2003
    ... >> I have a windows 2003 server that was upgraded from NT. ... Our local group policy does not work. ... >> to the clients workstation and nope the group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Group Policy not everywhere applied!
    ... >I have a network with WIndows 2000 and Windows XP clients. ... > created a group policy in my AD for users and computers. ... > I have made a few settings for Outlook ...
    (microsoft.public.win2000.group_policy)