The first problem I see in the gpresult file is that it is not saying who
the user is and who the computer is. See below:

User Group Policy results for: (should show
cn=user1,ou=devlopers,dc=domain,dc=com)

Computer Group Policy results for: (should show
cn=computer1,ou=devlopers,dc=domain,dc=com)

I suggest that you check the application log on the client for errors from
userenv. If there are errors post them in the group.

Are the clients pointing to a win2k DNS server for DNS and does that server
have the SRV records for the domain controllers in your domain? If dns is
not configured correctly then GPs will not apply.
It would be useful to enable userenv logging on the client, see 221833 How
to Enable User Environment Debug Logging in Retail Builds of Windows
http://support.microsoft.com/?id=221833

You should also review 250842 Troubleshooting Group Policy Application
Problems http://support.microsoft.com/?id=250842

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

"Akhlaq Khan" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> i have been trying to figure out how to get group policies in effect in my
> office network but so far i have not been successful. i read different
> articles, win2k books etc describing every bit of the logic working behind
> group policies... but i have not been able to find a single resource
> describing the exact steps to be taken to implement them. i am facing
> following problem .....
>
> I have Active directory installed on a win2k (SP3) machine. I have two
OUs:
> development (for software developers) and QA (for quality assurance
> engineers). I wanted to implement different group policies for both
> departments separately. i added some users in one of the OUs, right
clicked
> that OU, selected Properties, went to group policies tab, created a new
> group policy (previously there was no policy for the newly created OU),
> enabled a few features that i wanted in the group policy (both in computer
> configuration and user configuration), pressed OK to save the policy. then
i
> went on one of the client machines (win2k pro with SP4), logged in the
> domain using one of the users in that OU .... but no luck ... i ran
the
> gpresult.exe utility and found out that the client machine was still using
> some "Local Group Policy" .... and i am not sure what does this mean. i
have
> attached the result of gpresult.exe in a text file to this email.
>
> can anyone please tell me where i went wrong ? or can anyone please let
me
> know if there is some resource available on internet which can help me ?
>
> thanks ...
>
> akhlaq khan.
>
>
>

Thank you Tim ! you were a big help ! I figured out and corrected my
mistake: i was not providing correct DNS entry and that was causing me all
the problem. Thanks once again!

One more thing, do you know a good resource for information regarding what
group policies to set for certain objectives ? for example, i need to
implement a policy that does not allow anybody in one of the OUs to share
any folder except for what the network administrator allows. i was searching
for a policy that could let me do that but i couldn't find it in dozens of
policies listed in GPO editor. I was hoping that there might be some
resource like a website maybe, where i could get answers to such questions.

Thanks

Regards
Akhlaq Khan

"Tim Hines [MSFT]" <(E-Mail Removed)> wrote in message
news:#v#(E-Mail Removed)...
> The first problem I see in the gpresult file is that it is not saying who
> the user is and who the computer is. See below:
>
> User Group Policy results for: (should show
> cn=user1,ou=devlopers,dc=domain,dc=com)
>
> Computer Group Policy results for: (should show
> cn=computer1,ou=devlopers,dc=domain,dc=com)
>
> I suggest that you check the application log on the client for errors from
> userenv. If there are errors post them in the group.
>
> Are the clients pointing to a win2k DNS server for DNS and does that
server
> have the SRV records for the domain controllers in your domain? If dns is
> not configured correctly then GPs will not apply.
> It would be useful to enable userenv logging on the client, see 221833 How
> to Enable User Environment Debug Logging in Retail Builds of Windows
> http://support.microsoft.com/?id=221833
>
> You should also review 250842 Troubleshooting Group Policy Application
> Problems http://support.microsoft.com/?id=250842
>
> --
> Tim Hines, MCSE, MCSA
> Windows 2000 Directory Services
>
> =====================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Akhlaq Khan" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > i have been trying to figure out how to get group policies in effect in
my
> > office network but so far i have not been successful. i read different
> > articles, win2k books etc describing every bit of the logic working
behind
> > group policies... but i have not been able to find a single resource
> > describing the exact steps to be taken to implement them. i am facing
> > following problem .....
> >
> > I have Active directory installed on a win2k (SP3) machine. I have two
> OUs:
> > development (for software developers) and QA (for quality assurance
> > engineers). I wanted to implement different group policies for both
> > departments separately. i added some users in one of the OUs, right
> clicked
> > that OU, selected Properties, went to group policies tab, created a new
> > group policy (previously there was no policy for the newly created OU),
> > enabled a few features that i wanted in the group policy (both in
computer
> > configuration and user configuration), pressed OK to save the policy.
then
> i
> > went on one of the client machines (win2k pro with SP4), logged in the
> > domain using one of the users in that OU .... but no luck ... i ran
> the
> > gpresult.exe utility and found out that the client machine was still
using
> > some "Local Group Policy" .... and i am not sure what does this mean. i
> have
> > attached the result of gpresult.exe in a text file to this email.
> >
> > can anyone please tell me where i went wrong ? or can anyone please let
> me
> > know if there is some resource available on internet which can help me ?
> >
> > thanks ...
> >
> > akhlaq khan.
> >
> >
> >
>
>