Re: Problems creating a domain level group policy

From: Glenn L (the.only(delete)_at_gmail.com)
Date: 12/01/04


Date: Tue, 30 Nov 2004 22:17:33 -0800

you need to run gpresult from the workstation to find out if the workstation
is attempting to apply the policy.

Also, do you have any userenv errors on the workstaiton in the application
log.

-- 
Glenn L
CCNA, MCSE (2000,2003) + Security
"ntd" <ntd@discussions.microsoft.com> wrote in message 
news:971F2457-26AB-4172-8C62-6202D62A3B53@microsoft.com...
> Hello All'
>
> I am trying to create a domain-level group policy that prevents the last
> user name from being displayed in the logon screen.  My environment is a
> single domain consisting of one Windows 2003 server and several XP Pro
> workstations.  I have downloaded the GPMC and installed it on the server.
> The steps I am going through to create the group policy are as follows:
> 1. Open the GPMC
> 2. Highlight and right-click my domain (domain name is test.com)
> 3. Select the "Create and link a GPO here." option
> 4. Name the GPO "LastUserNotDisplayed" and click OK
> 5. Right-click on the "LastUserNotDisplayed" GPO under the Group Policy
> Objects on the left pane of the GPMC and select the edit option (which 
> opens
> the Group Policy Editor).
> 6. In the left pane of the Group Policy Object Editor I double-click the
> Windows Settings folder under Computer Configuration
> 7. I then double-click the Security Settings
> 8. I then double-click the Local Policies
> 9. I then double-click Security Options
> 10. I then scroll down and enable the "Do not display last user name" 
> option
> 11. I then exit the Group Policy Object Editor, which takes me back to the
> GPMC
> 12. In left pane of the GPMC I highlight and right-click the
> "LastUserNotDisplayed" GPO under the Group Policy Objects and select GPO
> Status
> 13. I make sure the GPO status is enabled
> 14. In the Scope tab of the "LastUserNotDisplayed" GPO I right-click the
> domain name (test.com) and select enforced.
> 15. I close the GPMC
>
> After taking these steps, the group policy is enforced on the server, but
> not on the workstations.  How do I get this to apply to the workstations?
> Any help would be appreciated.
>
> I can ping the server from all workstations by IP and name
> I can ping the workstations from the server by IP and name
> 


Relevant Pages

  • Up for a chalenge?
    ... Everything fires up, workstations ... "Application Settings" to the same directory as "My Documents" (Since it's ... When I attempt to access the GPO cache for the OU, ... Group Policy processing aborted. ...
    (microsoft.public.cert.exam.mcse)
  • Re: What is the quickest way to do this
    ... Script Group Policy Settings with the GPExpert Scripting Toolkit for PowerShell! ... workstations how long does it take for the settings to take effect by ... FORCE is only nessesary if you want to REDEPLOY an applied GPO. ... so in future when i change or create a new GPO i will just gpupdate in a command line ...
    (microsoft.public.windows.group_policy)
  • Re: Copy GPO
    ... In Group Policy Management Console, all the GPOs select the "Group Policy Obects", right click, select "Back Up All...". ... In GPMC in the other domain, you can import the settings from a GPO backup into a new, empty GPO, or Restore the GPO from the backup folder. ... Alternatively, you can add the destination forest to the GPMC (right click the root - "Group Policy Management" in the left pane, select Add Forest...), then you can use "Copy" and "Paste" to copy a GPO from one forest to another. ...
    (microsoft.public.windows.group_policy)
  • Re: Re: copying Group Poliy Objects...
    ... GPO, then "Import" the settings from that backup into a new, empty, GPO. ... Policy Objects" container in GPMC. ... >>> created group policy does not always work right away. ...
    (microsoft.public.win2000.group_policy)
  • Re: Deleted GPO Applying to Workstations
    ... It was created and deleted from the child domain only. ... Workstations are Windows XP SP2 ... In the child domain in question, group policy is not applying accurately. ... if I delete a GPO completely it may ...
    (microsoft.public.windows.group_policy)