It sounds like the group policy may not be applying. Please try the
following:
1. Log onto a client with the problem user account. Open a command prompt
and run the following command: secedit /refreshpolicy machine_policy
/enforce. When this has completed, look in the application log of the
client machine that your problem user is logging into. Please let me know
if you are seeing any userenv 1000 and/or scecli 1202 errors. What you
should see is an scecli 1704 informational entry in the application log
stating that group policy applied successfully.
2. If you see the scecli 1704 message, then group policy appears to be
applying correctly. You can run a gpresult /v on the client to see exactly
what group policies did or did not apply to the client. Gpresult is a 2000
resource kit utility that you can download off microsoft's web site. If
your group policy is not listed, then it is not applying.
3. If the group policy is not applying, but you are getting an scecli 1704
message in the event viewer, then it could be that your user account is not
configured to read and apply that group policy or the user may not be a
member of the OU where the group policy is being applied. You might want to
check on these as well.
If none of these things help you, please provide more details as to errors
that you are seeing, etc. Thanks.
Ray Lava
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights
