Problem with applying Group Policy

From: T.J. (tjmale@dciu.org)
Date: 09/06/02


From: "T.J." <tjmale@dciu.org>
Date: Fri, 6 Sep 2002 10:47:23 -0700


>-----Original Message-----
>I am running a 2K domain w/ Active Directory and 2K Pro
>clients. I have tried to apply Group Policies to the
>users when they login, however the policies don't seem to
>be applied at the workstation. I have even tried to
>change the Default Domain Policy just to hide the icons
on
>a user's desktop just for testing and I can't even get
>that to work.
>
>I ran GPRESULT /V from both the DC running AD and also a
>client workstation and it appears that the workstation is
>only applying the Local Group Policy whereas the DC
>applies the Group Policy.
>
>Any help in determining what configs I have wrong or the
>simplest step-by-step instructions for setting up a GP
>would be greatly appreciated. Even just to get changes
in
>the Default Domain Policy to take affect for all users
>would be a great start.
>
>If I can't get the policies to apply from the domain
>level, I would be happy to set policies locally being as
>there aren't that many machines to deal with. Only
>problem is that must still login to the domain for
network
>printing. Is it possible to force a local policy to
>override a domain policy?
>
>Thank you for any advice.
>.
>

Figured it out; workstations were running DHCP and getting
DNS from a DNS server from an NT domain. Hardcoded the
workstation to use the DC IP address for DNS and the
Default Domain Policy was downloaded to the workstation.

T.J.



Relevant Pages

  • Problem with applying Group Policy
    ... clients. ... I have tried to apply Group Policies to the ... change the Default Domain Policy just to hide the icons on ... problem is that must still login to the domain for network ...
    (microsoft.public.win2000.security)
  • Password lockout for users
    ... In Domain Policy go to Computer ... policies. ... Click on Account lockout threshold. ... Set the login ...
    (microsoft.public.win2000.security)
  • Re: ADUC & SBS groups
    ... I understand about the OU containers and the implementation of policies now. ... The Location was set to the workstation name and I was unable to change it ... If you're experimenting or testing on anything in AD or group policy, ...
    (microsoft.public.windows.server.sbs)
  • Re: Roaming man profile, 2000 server and xp pro clients
    ... your advice was to change the domain policy "Number of previous logons to ... >> One hard solution would be to disable cached credentials ... >> on the workstation. ... When cached credentials are disabled and a DC ...
    (microsoft.public.win2000.networking)
  • Re: difference policies
    ... 'domain workstation' the one you're looking for is 'domain computers' ... add the group to the security tab of the default domain policy ... but i do not find these groups (domain workstation and domain user) in the ...
    (microsoft.public.win2000.group_policy)