Applying a GPO

[M. T]

I created a new OU, new GP within that OU, added a new user
to that OU, added a application to start when the user logs
on (c:\\windows\system32\calc.exe .....XP Pro user)and
disabled changing the wallpaper. Logged off. Waited the 15
minutes for the polict to go into effect. Logged back on,
nothing was changed. Ran GPresult /v and got: "the
policy object doe not exist". So I removed the new OU I
created along with the new GP. Moved the user to the
"User" folder and then when into the GP for the "Default
Domain Policy" made my testing changes (calc.exe and
wallpaper). Logged off, waited 15 minutes for the policy
to "roll" out, logged back on..nothing different. Calc.exe
did not start up nor was I restricted from changing the
wallpaper.

thoughts?

 

[Arild Bakken]

GPOs are applied every 90 minutes by default on computers.

But, if the policy contains user settings (which I assume since you put the
user in the OU containing the GPO), you only need to wait for domain
replication (which is typically 1-2 minutes in-site replication, about 30
minutes for cross-site replication)

If you added the setting to the computer settings section you'll have to
move the computer into that OU.

Also you need to make sure that the user/computer has access to the GP. This
means they need Read & Apply Policy access on the GP, and need to be able to
read the properties of the OU where the GP is linked.


Arild

 

[M. T]

My settings are taking effect on the DC but are not on my
test machine. "Read & Apply Policy access on the GP"
& "read the properties of the OU where the GP is linked"
<----How do I go about doing this?
thank you