Issues Applying Group Policy Using Group Membership

Hello,

I am having issues with applying group policy using group membership.
I have two different group policies: one which has computer settings
to apply and the other user settings with Enable Loopback Processing
enabled. I am applying these to a Windows XP machine and a Windows
2000 machine. Below are my findings/results:

The group policy has User Configuration settings in addition to Loop
Back Processing being enabled.

The PC is in the OU the GP is applied to, the PC is a part of the
group, and the user is not in the OU or a part of the group:
· The policy is applied but does not work on the Windows XP machine.
· The policy is applied but does not work on the Windows 2000
machine.

Added the user to the group policy's Security Filtering with Read and
Apply Group Policy permissions:
· The policy is applied and works on the XP machine.
· The policy is applied and works on the Windows 2000 machine.

The group policy has Computer Configuration settings.

The PC is in the OU the GP is applied to, the PC is a part of the
group, and the user is not in the OU or a part of the group:
· The policy is applied and works on the XP machine.
· The policy is applied but does not work on the Windows 2000
machine.




I have a few questions:
Why do the user settings only apply when the user is added to the
security filtering? This renders this type of group policy useless as
we plan on applying the group policy to the entire domain and filtering
using group membership.

Why don't the computer settings apply to the Windows 2000 machine?

.

Relevant Pages

  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: group policy scrolling marquee
    ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
    (microsoft.public.win2000.group_policy)
  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How to enforce Remote Assistance and Remote Desktop via GPO?
    ... By setting the GPO status to "user Configuration Settings Disabled" then ... I understand that you want to enforce remote ... assistance group policy settings and remote desktop group policy settings ... To enable remote desktop and remote assistance on specific Windows XP ...
    (microsoft.public.windows.server.sbs)