Domain group policy

[Tony WONG]

i find the group policy of some workstations are not updated once they are
logon in the morning.

To ensure it, i would think to add command "gpupdate" in the login script.

Would there be any problem to the network? The network has less than 100
workstations.

Any better method to do it?

i have another question that why the previous policy is not adopted by the
workstation when the group policy is not updated from the domain. When the
policy is not updated, i find the workstation is using the local policy (xp
firewall is activated).

Thanks for any help.

tony

 

[Florian Frommherz]

Howdie!

i find the group policy of some workstations are not updated once they are
logon in the morning.

To ensure it, i would think to add command "gpupdate" in the login script.

Would there be any problem to the network? The network has less than 100
workstations.

What is your main reason to think that the policy is not getting
applied? Are there any errors in the workstation's event log. Is the
policy "Always wait for the network at computer startup and logon" at
"CompConf\Adm Temp\System\Logon" activated? If not, try so.

cheers,

Florian

 

[Tony WONG]

Thanks Florian

Group policy
i've already activated this item in group policy.
My group policy is to disable XP firewalll.

My error
Some workstation of DocuWork (network scanning program) got error sometimes
because it is blocked by xp firewall
i find the xp firewall is activated in XP network property.
then i type "gpupdate" command. the xp firewall is disabled.
The DocuWork run fine.

What i wish
1. to activate the group policy once it is logon. is it wise to put
"gpupdate" in the login script? what is the possible cause that the policy
is not applied after logon 2 hours? is my network not well tunned?

The server is Windows 2003 server (standard) w/ less than 100 workstations.

Thanks a lot for your assistance.

Tony

 

[Florian Frommherz]

Howdie!

Group policy
i've already activated this item in group policy.
My group policy is to disable XP firewalll.

You mean that "Always wait for the network..." policy? Is it applied AND
working? Have a look at rsop.msc to see whether it got applied. I belive
it isn't.

What i wish
1. to activate the group policy once it is logon. is it wise to put
"gpupdate" in the login script? what is the possible cause that the policy
is not applied after logon 2 hours? is my network not well tunned?

You can try but I don't think this will work pretty well. See, it
should, by applying the policy above, be able to check if there are new
policies.

I'd suggest you evaluate whether the policy above is applied - if not,
try to make it work. If it is applied, well, try your startup script
solution. It can work, but is nothing it'd consider "good design".

cheers,

Florian