Re: Group Policy on a Win2K domain won't apply to an XP Pro workstation.

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/07/03


Date: Sat, 6 Dec 2003 18:12:17 -0700

If the W2k work and the XP are in the same location in
Active Directory (and hence subject to the same GPOs)
then check that the Tcp/Ip settings for DNS on the XP
client is identical to that on the working W2k.
The SRV records must be located via DNS for many
Active Directory features to work.
RSoP is Resultant Set Of Policy - there is a snap-in
by this name that you can load into an mmc console.
It will tell you what policies are being seen and applied.
These are all rather sizable topics, about which the MS
website has How-To guides you can probably turn up
with a little bit of search.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Jeremy" <jwhyman@carolina.rr.com> wrote in message
news:01c601c3bc39$615983c0$a101280a@phx.gbl...
> Those are all good suggestions I'm sure, but I'm going to
> need a little help with them.  I am a network guy and
> don't know a great deal about the topic at hand.  How do
> I run RSoP? How do I determine if it sees the GP? (I
> don't think it does.)  I have clients in both the default
> computers OU and other OU's that have the GP applied to
> them.  Please explain how DNS would affect the
> application of the GP.  I do believe that DNS is correct
> but an explenation may shed additional light.  As I said
> all of the Win2k machines work just fine so I thought
> there must be something slightly different about how XP
> interacts with the GP.
>
> Thanks for the help!
>
> >-----Original Message-----
> >Group policy application onto XP clients works.
> >I suggest you first exhaust standard GP troubleshooting
> >What does RSoP on the client show ?  Is it seeing the
> >policy at all?  Is the client in the right OU?  Is the
> DNS
> >setting of the client correct? etc.
> >
> >-- 
> >Roger Abell
> >Microsoft MVP (Windows Server System: Security)
> >MCSE (W2k3,W2k,Nt4)  MCDBA
> >"Jeremy" <jwhyman@carolina.rr.com> wrote in message
> >news:1bac01c3bc2a$35529a00$7d02280a@phx.gbl...
> >> I have a Win2k domain with a Group Policy that among
> >> other things forces the screensaver to lock the machine
> >> after 7 min of inactivity.  The GP works great with
> Win2K
> >> Pro clients, however, does not apply when I put a WinXP
> >> Pro client on the domain.  Executing gpupdate on the XP
> >> client doesn't help.  Anyone run into this before?
> >
> >
> >.
> >


Relevant Pages

  • RE: Windows 98/98SE Clients after 2K to 2K3 migration.
    ... About the Group Policy, sorry for my typo in my previous reply. ... Installing Active Directory Client Extensions ... Windows 98 clients do not have all of the features of newer operating ... systems that were designed to take advantage of Active Directory services. ...
    (microsoft.public.windows.server.migration)
  • Re: Clients cannot find sharepoint
    ... The client machines had an entry in the append DNS ... Get ipconfig/all result on SBS and client computer. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet Speed
    ... I think what we are trying to say is to use the DHCP from the SBS and NOT ... DNS and WINS point to the SBS. ... as the server IP address. ... it is recommend to configure all SBS client computers' IP and DNS ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO problems
    ... It was the ISA 2004 firewall client. ... DNS settings and network properties on the server and client computers. ... > Service of SBS is configured to be the DNS server on the problematic ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS-AD integration
    ... On the client open a command prompt and type "set". ... I have also set up AD-integrated DNS in both of these servers. ... use the first domain controller ip address. ... It will use DNS Round Robin to resolve it. ...
    (microsoft.public.windows.server.dns)