How to apply computer settings

[feghali_ziad]

Have a Lab in a separate LAN with windows 2000 Domain environment.
Got to test Software Update Services SUS and Software Installation.
The only concern now for me is to use the computer settings and not
the user settings in a specified OU's. The situation is as follows:

I create an OU directly under the Domain OU. Create Domain Local Group
and add some test computer accounts to that group. Create GPO linked
to that OU specified and configured under the computer settings,
administrative components, windows update, all the four available
settings. The 1st setting when applied shall disable user intervention
which means that Automatic Updates AU options in control panel are
disabled on the target computer.
After run the SECEDIT command to refresh this machine policy but never
applied even after multiple restart taken into consideration that when
apply the 1st setting but with a local Group Policy, AU is
automatically disabled.
Checking the security tab in the GPO and add the Domain local group
and the Domain Computers group in the security with read and apply
Group Policy but still in vain.

Also I create a package for Office 2000 with the necessary share and
security over its folder, this package was added in the software
installation under computer settings but still never apply.

Briefly, and when adding any settings under computer settings under
this Specified OU, like these settings, are never applied to target
computers. But and when apply the same settings on the Domain Level,
they are applied automatically.

So how can we apply some computers settings like the above on a
specified OU and not on the Domain Level?

Thanks in advance
Ziad

 

[feghali_ziad]

Actually it's not a reply as it's a clarification to my below 1st
message. Indeed and what i ask is very simple with this message and as
follows:
i'm not able to apply, through group policy, computer or user settings
on a specified OU in a windows 2000 domain whereas, it's applied on
the domain level.
issuing gpresult, i found that the test computer is applying only from
local group policy and default domain policy and never from the
specified OU which is directly under the domain level.
hope this message is easier for you guys and thanks again for your
reply.
Good Day,
Ziad

 

[Tom Ausburne]

Hi Ziad,

First make sure that the user or computer account that you want the
policy to apply to is located inside of the OU. Also make sure that
the User or Group that the user is a member of has been given
Security rights to the policy and that the "Apply Group Policy" check
box for the groups that you want this policy to apply to is checked.


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.