Re: GPO's don't work at all

From: Fec (Fec_at_Fec.com)
Date: 02/07/05 

Date: Mon, 7 Feb 2005 20:07:30 -0000

We had issues with GPO's not being applied - this was when believe it or
not, there were 'username/passwords' in 'control panel/user accounts' that
had blank passwords.

After removing the combinations with blank passwords - GP was applied
successfully.

A long shot but worth trying.

Also, run the Group Policy results wizard - this should at least let you see
what is & isn't being applied - and most importantly - why not

Or you can try to make the change (like hiding the run button) in an
existing group policy - see at least if that works.

Have a look in the event viewer on the client - guaranteed if there is a
problem - something will show up - usually associated with 'userenv' - Look
up the error on www.eventid.net

Check your group policy refresh interval for both server & clients - make
sure it is reasonably short time.

Good luck

Right I'm off for some Bourbon - good suggestion!!

Fec
"Hans Ligtvoet" <HansLigtvoet@discussions.microsoft.com> wrote in message
news:A49061DC-3A88-4547-BE25-4B5F28D74FD5@microsoft.com...
> In Group Policy Management console I have created a forest
> [companyname.local]. Under that is Domains. Under that is my domain
> [companyname.local]. Then there's a list of linked GPO's, followed by
> Domain
> Controllers, MyBusiness, Group Policy Objects an WMI Filters.
> On the same level as Domains follows Sites, then Group Policy Modeling and
> as last Group Policy Results.
>
> Our GPO's are added in the list of linked GPO's or added to the MyBusiness
> section.
>
> All GPO's are enabled, we tried to enforce them, we tried to block
> inheritance and we tried to use cmd promt gpupdate /force on both server
> and
> client computers. All without error messages and all without any result.
>
> All of this seems pretty straightforward to me. We're now considering to
> feed our server with a glass of straight bourbon into the dvd station but
> only as a last resort....
>
> Any further thoughts?
>
> "dvw" schreef:
>
>> Are you sure you've linked your GPO to the domain?
>>
>> "Hans Ligtvoet" wrote:
>>
>> > I'm new to SBS, so please be gentle adored guru's of this forum.
>> >
>> > We're using the Group policy object editor and the Active directory
>> > users
>> > editor to change gpo's. I think our GPO's must be located at the
>> > default
>> > directory. We don't know where to find the location of that directory
>> > so we
>> > can't check individual rights set to that dir.
>> >
>> > We have access to several books on the subject but we're not able to
>> > find
>> > that missing piece of information to get started.
>> >
>> > Our domain consists of one server with SBS2003 Standard. It has two
>> > network
>> > cards, one connecting to the clients, the other connecting to a router
>> > which
>> > goes to the internet. In the domain there are three clients with XPSP2
>> > and
>> > one network printer that has a fixed IP address.
>> >
>> > Our problem is that GPO's simply don't work on our clients. We tried to
>> > enforce GPO's (overrule option in the editor). We used cmd prompts with
>> > gpupdate /force on the clients as well as on the server, but nothing
>> > seems to
>> > happen. Even a simple GPO like hiding the run button from the start
>> > menu
>> > doesn't work at all. We choosed the right scope and so forth......
>> >
>> > Strange thing is that general group and user policy works good.
>> > Administrators can do more on the clients than simple domain users.
>> > It's just
>> > that applying a GPO to any user will not result in any effect.
>> >
>> > We found out how to make a profile roaming and that works allright. We
>> > also
>> > managed to configure the server as a print server. It took us 5 days to
>> > come
>> > so far and our level of max tolerated frustration has almost been
>> > reached.
>> >
>> > Can anyone please help us out?
>> >