RE: Group Policies on OUs not Propagated

From: Kevan Smith (KCSmith@tideworks.com)
Date: 03/22/02 

From: Kevan Smith <KCSmith@tideworks.com>
To: "'comprepsrv@yahoo.com'" <comprepsrv@yahoo.com>, focus-ms@securityfocus.com
Date: Thu, 21 Mar 2002 16:46:31 -0800

To force your GPOs to be re-applied, run from the command line from the
client in question:

        secedit /refreshpolicy machine_policy /enforce
        secedit /refreshpolicy user_policy /enforce

If you need to undo changes made by a GPO, you may first need to re-apply
"setup security.inf" by typing:
        secedit /configure /db mysystem /cfg
"c:\winnt\security\templates\setup security.inf" /overwrite
or add the Security Configuration and Analysis template to an MMC console to
do reapply the setup security policy interactively.

More info can be obtained through KB article Q227302 or Q227448, or by
typing at the console:
        secedit /?

Cheers,

Kevan Smith
NT Administrator
Tideworks Technology

-----Original Message-----
From: comprepsrv@yahoo.com [mailto:comprepsrv@yahoo.com]
Sent: Thursday, March 21, 2002 1:40 PM
To: focus-ms@securityfocus.com
Subject: Group Policies on OUs not Propagated

Hello, I have a w2000 server running AD that
authenticates w2000 clients. I have different policies
set up for different OUs in AD. Domain level policies
are picked up fine. With a new user account, policies
are picked up okay. However, if a user account that
has been in use is used, the policies do not refresh.
Can anyone tell me how to correct this?

thakns
dp

Relevant Pages

  • Re: How to ... 2nd request
    ... > I appreciate your clarification and views on my answer Glenn. ... >> OUs and GPOs, ... >> There are two policies you can set to acheive the desired results. ... >> the workstations will not revert back to their default state. ...
    (microsoft.public.windows.server.general)
  • Re: How to ... 2nd request
    ... > I appreciate your clarification and views on my answer Glenn. ... >> OUs and GPOs, ... >> There are two policies you can set to acheive the desired results. ... >> the workstations will not revert back to their default state. ...
    (microsoft.public.windows.server.active_directory)
  • RE: How do i stop duplicate values in report
    ... I'd recommend using a main report for the client's personal details with two ... one for addresses and one for policies. ... output to the selected client, so you'll only be prompted once for the Client ... The RecordSource for the main report would be a query on the personaldetails ...
    (microsoft.public.access.gettingstarted)
  • Re: who can give me a e.g using Customer UsernameToken
    ... The error is happening because you are using different policies on the ... You should use the policies below on the client and the service ... <faultstring>Microsoft.Web.Services3.Security.SecurityFault: Security ... CustomUsernameTokenManager for the service. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Policy does not hide when logging on to WinXP sp3 on Win2K domain
    ... Policies and Roaming Profiles. ... Intermittenly, when users log on, on the ... I believe that this one of the Group policy or script ... client machine to see if the computer and user policies loaded correctly. ...
    (microsoft.public.windowsxp.security_admin)