Re: having problems getting security options to work in group policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/10/05


Date: Thu, 10 Feb 2005 14:29:03 -0600

Make sure you are applying these settings at the proper level. Domain
Controller Security Policy is for domain controllers only and by default
Domain Security Policy would apply to all other domain computers, though it
can also be defined via a GPO at the Organizational Unit Level and settings
defined at that level would override like defined settings at the domain
level. Keep in mind that Windows 2003 has numerous additional settings that
Windows 2000 does not have, so if you enable those settings via the Windows
2003 domain controller, they will not apply to the Windows 2000 computers.
Try configuring some common security options for both operating systems to
see if they apply. Also in Windows 2000 the "effective" setting in Local
Security Policy may be different that the local settings when an overriding
policy has been applied. That would show that domain/OU policy was in
effect. The support tool gpresult can help in troubleshooting by showing
what computer configuration policies are applying to a computer and unless
you reboot or use secedit to refresh the Group Policy on the Windows 2000
computers it can take up to a couple of hours for the new policy to
ply. --- Steve

"ryang" <ryang@discussions.microsoft.com> wrote in message
news:2FA91016-F4E3-4667-901C-7C2185620C55@microsoft.com...
> I'm trying to set options in computer configuration\windows
> settings\security
> settings\local policies\security options. Nothing that I enable or change
> in
> this section replicates to the client computers. My server is win2003 and
> all
> clients are win2000pro. In fact, nothing in the security settings section
> replicates to the clients. I'm able to set all other group policy options,
> like disabling control panel, setting wallpaper, etc. But I don't know why
> this will not work. Is there something I'm missing? Is there an option
> somewhere that enables this and I can't find it? Any help would be
> appreciated.
>
> Thanks,
>
> ryang



Relevant Pages

  • Re: Parts of GPO not working.
    ... If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help. ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Parts of GPO not working.
    ... I have a request that all of those computers not have Internet ... The settings in this GPO can only apply to the following groups, ... Group Policy refresh interval for computers Enabled ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automated logoff using Winexit.scr
    ... New OU - New Policy ... Settings: Configure this key then Propogate inheritable permissions to ... Permissions granted: Authenticated Users: Read/Special ... test GPO linked to it trying to accomplish that and move a couple computers ...
    (microsoft.public.windows.group_policy)
  • Re: cant override screen saver policy
    ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ... >> don't get this policy setting. ...
    (microsoft.public.win2000.group_policy)
  • Re: Proxy GPO will not apply
    ... The policy is a user configuration setting, so it applies to user accounts ... computers in some labs at the company I work for. ... Made the proxy settings per-machine instead of per-user. ...
    (microsoft.public.windows.group_policy)