Re: Group Policy Object Editor

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi
when you're editing the policy you're editing locally you're making those changes directly on the server, so the question is in what server are you editing the policy , by default "if i'm not mistaken" the gpo editing takes preference to edit on the PDCe, unless you specify the server manually, if so check if replication is working or manually change the server.
You can also download the GPMC from MS site and installe it on your XP console.

--
I hope that the information above helps you
Good Luck

Jorge Silva
MCSA
Systems Administrator

"CJC" <cjc82@xxxxxxxxxxxxx> wrote in message news:1162385480.456861.11620@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi there, any help would be much appreciated. Apologise first up for
the longish question, but here I go:

I am currently in the process of rolling out a software restriction
policy to the company and I find the response rate of PC's picking up
the changes quite slow.

Details:
PC's = XP professional Service pack 1 and 2.
Server holding AD = Windows 2000
Software restriction policy = Holds mainly path rules. Everything is
restricted apart from the rules I add and there is currently 40 items.
Where I have the program path to program files and start menu allowed.

Initial problem:

As AD was on Windows 2000 the options were quite limited so instead of
editing the policy on the server itself I ran MMC from my PC and linked
to the OU and edited it that way.

So my belief is that there is some kind of time delay because of the
fact I am doing it on my PC in relation to the policy going between my
PC and the server, and then from the server to the clients.

Example:

Just made one amendment yesterday afternoon and it has still not got
through to the PC's which is now coming up to around 18 hours. But
what the weird thing is, is that I made an alteration prior to the main
one and saved it, but then deleted it, and this one has came through
with no problems but the one I want which was made a couple of minutes
after hasn't.

Another thing is, is that when I first add the PC to the OU by the end
of the day it has the policy upon, but any changes afterwards is slow.

Maybe this is normal and I'm just impatient but ideally I would like
to make an alteration to the OU and on the next reboot or gpupdate
/force it comes through.

So basically is this normal or should it be quicker,
Is there anything obvious from what I'm doing that is slowing it
down.
Can the changes be pushed through at all quicker?

Many thanks.


.

Relevant Pages

  • Re: Group Policy Object Editor
    ... When you create a mmc console you're connecting to some sever to get that info from ad, and when you edit the domain policies you're in fact editing these policies in that server. ... When you do changes on domain policies you're changing that policy directly, the fact that you save these settings to a file doesn't mean anything, you're just saving configuration that you can apply in o other systems with configuration and analyses console. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to allow users to create groups and shares
    ... Add the user/group to the Computer configuration, windows settings, security settings, Local policies, "Allow logon locally" in the Default domain controllers policy and on a existing or new created policy for the member servers. ... Filtering: Not Applied ... check with GPMC on the server or from a client the policy settings. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Object Editor
    ... I'm editing the policy locally on my machine but presumably making ... mean I'm not working directly on the server does it? ... You can also download the GPMC from MS site and installe it on your XP ...
    (microsoft.public.windows.server.active_directory)
  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)