I am trying to implement a policy on a server using my domain controller. I
am trying at this point just to get it to work so I am just trying to get the
my documents folder not to appear on the desktop. I created an OUcalled test
for the policy, on my domain controller, put the server I am testing in the
test OU. On the test OU i created i created a policy through AD going to
user config, admin templates, desktop and then enabling it. I clicked on the
properties of the test OU added my security group and then went into
permissions and checked the box read and and apply group policy. However
when I test it the my doc folder still appears. If anyone has any advice I
would be very grateful. Thanks

Group Policy Objects containing user settings are applied to user accounts
by virtue of what OU the user account is in. Which Groups the user account
is doesn't matter.

You can "prevent" a GPO from being applied to members of a group using the
technique you describe, but you can not "force" a Group Policy Object to be
applied this way because GPO application is to objects in Organisational
Units, not members of Group.

However, If loopback processing is enabled in a GPO that applies to a
computer, User Configurations in GPOs applied to the OU containing the
computer will be applied to users when they logon at that computer.

For how to apply User Configuration settings to users when they logon to
selected computers (e.g. Terminal Servicesr/Citrix servers), use loopback
processing. See the discussion in the thread "Getting desperate: GPO
applying incorrectly, PLEASE HELP ME!!" in the newsgroup
microsoft.public.windows.group_policy.

You may find the "white paper" at
http://www.microsoft.com/technet/pro...t/gpinfra.mspx
useful. See in particular the section called "Group Policy Loopback
Support".

--
Bruce Sanderson MVP

It's perfectly useless to know the right answer to the wrong question.


"jennifer" <(E-Mail Removed)> wrote in message
news:ABD07AE4-92B0-4695-B7D9-(E-Mail Removed)...
>I am trying to implement a policy on a server using my domain controller.
>I
> am trying at this point just to get it to work so I am just trying to get
> the
> my documents folder not to appear on the desktop. I created an OUcalled
> test
> for the policy, on my domain controller, put the server I am testing in
> the
> test OU. On the test OU i created i created a policy through AD going
> to
> user config, admin templates, desktop and then enabling it. I clicked on
> the
> properties of the test OU added my security group and then went into
> permissions and checked the box read and and apply group policy. However
> when I test it the my doc folder still appears. If anyone has any advice
> I
> would be very grateful. Thanks

Thank you for all the information it was very useful in helping me to
understand why it wasn't working. I had fixed it based on an artiicle I read
I was applying the loopback in the policy on my DC ou and not locally on the
citrix server. Thank you very much for your help.
"Bruce Sanderson" wrote:

> Group Policy Objects containing user settings are applied to user accounts
> by virtue of what OU the user account is in. Which Groups the user account
> is doesn't matter.
>
> You can "prevent" a GPO from being applied to members of a group using the
> technique you describe, but you can not "force" a Group Policy Object to be
> applied this way because GPO application is to objects in Organisational
> Units, not members of Group.
>
> However, If loopback processing is enabled in a GPO that applies to a
> computer, User Configurations in GPOs applied to the OU containing the
> computer will be applied to users when they logon at that computer.
>
> For how to apply User Configuration settings to users when they logon to
> selected computers (e.g. Terminal Servicesr/Citrix servers), use loopback
> processing. See the discussion in the thread "Getting desperate: GPO
> applying incorrectly, PLEASE HELP ME!!" in the newsgroup
> microsoft.public.windows.group_policy.
>
> You may find the "white paper" at
> http://www.microsoft.com/technet/pro...t/gpinfra.mspx
> useful. See in particular the section called "Group Policy Loopback
> Support".
>
> --
> Bruce Sanderson MVP
>
> It's perfectly useless to know the right answer to the wrong question.
>
>
> "jennifer" <(E-Mail Removed)> wrote in message
> news:ABD07AE4-92B0-4695-B7D9-(E-Mail Removed)...
> >I am trying to implement a policy on a server using my domain controller.
> >I
> > am trying at this point just to get it to work so I am just trying to get
> > the
> > my documents folder not to appear on the desktop. I created an OUcalled
> > test
> > for the policy, on my domain controller, put the server I am testing in
> > the
> > test OU. On the test OU i created i created a policy through AD going
> > to
> > user config, admin templates, desktop and then enabling it. I clicked on
> > the
> > properties of the test OU added my security group and then went into
> > permissions and checked the box read and and apply group policy. However
> > when I test it the my doc folder still appears. If anyone has any advice
> > I
> > would be very grateful. Thanks
>
>
>