GPO does not take effect

[Al Taylor]

Hi folks,

Please point me in the right direction. I cannot seem to get a policy to take effect. This is a small network with 1 win2k server, 4 win2k pro clients, and 4 xp pro clients. at a little community school. I want to implement a Group policy to keep the students from changing their desktops, installing software ect. I have created an active directory OU and populated it with the students. I then created a GPO with the settings I wish to enforce, but the GPO does not take effect. What am I missing?

Al Taylor
(e-mail address removed)

 

[Tony Moo]

At the command prompt type "secedit /refreshpolicy user_policy /enforce" after applying the policy.
Tony
Hi folks,

Please point me in the right direction. I cannot seem to get a policy to take effect. This is a small network with 1 win2k server, 4 win2k pro clients, and 4 xp pro clients. at a little community school. I want to implement a Group policy to keep the students from changing their desktops, installing software ect. I have created an active directory OU and populated it with the students. I then created a GPO with the settings I wish to enforce, but the GPO does not take effect. What am I missing?

Al Taylor
(e-mail address removed)

 

[Al Taylor]

Thanks Tony, but that command did not help. I ran the command on a client station and on the server to no avail. Am I missing something else?
At the command prompt type "secedit /refreshpolicy user_policy /enforce" after applying the policy.
Tony
Hi folks,

Please point me in the right direction. I cannot seem to get a policy to take effect. This is a small network with 1 win2k server, 4 win2k pro clients, and 4 xp pro clients. at a little community school. I want to implement a Group policy to keep the students from changing their desktops, installing software ect. I have created an active directory OU and populated it with the students. I then created a GPO with the settings I wish to enforce, but the GPO does not take effect. What am I missing?

Al Taylor
(e-mail address removed)

 

[David Fisher [MSFT]]

Hello Al.

First, what errors are reported in the event log of the client systems? If
group policy fails to apply, you should see errors in the application event
log.

If no errors are being reported, then the policy either isn't linked to the
OU or is being filtered out.

Are you configuring settings in the policy under the "user configuration"
portion of the policy?

David Fisher
Enterprise Platform Support

Thanks Tony, but that command did not help. I ran the command on a client
station and on the server to no avail. Am I missing something else?
At the command prompt type "secedit /refreshpolicy user_policy /enforce"
after applying the policy.
Tony
Hi folks,

Please point me in the right direction. I cannot seem to get a policy to
take effect. This is a small network with 1 win2k server, 4 win2k pro
clients, and 4 xp pro clients. at a little community school. I want to
implement a Group policy to keep the students from changing their desktops,
installing software ect. I have created an active directory OU and populated
it with the students. I then created a GPO with the settings I wish to
enforce, but the GPO does not take effect. What am I missing?

Al Taylor
(e-mail address removed)

 

[Al Taylor]

David,
Thanks for helping out.

First, what errors are reported in the event log of the client systems? If
group policy fails to apply, you should see errors in the application event
log.

Yes the app event log has many errors that say "Window cannot determine the user or computer name. Return Value [1722]".

How can the computer NOT know who I am? I am logging in with a 'domain' user account.


Are you configuring settings in the policy under the "user configuration"
portion of the policy?

Yes

What am I not seeing.

Al Taylor

 

[Palle]

Make sure you've got a DNS server specified on the clients and no DNS
problems on the DC, if you don't have name resolution on the network, all
kinds of problem will occur.

/P
David,
Thanks for helping out.

First, what errors are reported in the event log of the client systems? If
group policy fails to apply, you should see errors in the application event
log.

Yes the app event log has many errors that say "Window cannot determine the
user or computer name. Return Value [1722]".

How can the computer NOT know who I am? I am logging in with a 'domain' user
account.


Are you configuring settings in the policy under the "user configuration"
portion of the policy?

Yes

What am I not seeing.

Al Taylor

 

[tony getor]

Hello Al,
By the way, did you specifically apply the GPO you created to the OU you created for users?
Tony G.
David,
Thanks for helping out.

First, what errors are reported in the event log of the client systems? If
group policy fails to apply, you should see errors in the application event
log.

Yes the app event log has many errors that say "Window cannot determine the user or computer name. Return Value [1722]".

How can the computer NOT know who I am? I am logging in with a 'domain' user account.


Are you configuring settings in the policy under the "user configuration"
portion of the policy?

Yes

What am I not seeing.

Al Taylor

 

[Al Taylor]

Guys, Thanks for all of your help but the GPO still does not take effect. I'm pulling my hair out in clumps. I have checked and rechecked everything I can think of, but I still must be overlooking something. Please help.

Al
Hello Al,
By the way, did you specifically apply the GPO you created to the OU you created for users?
Tony G.
David,
Thanks for helping out.

First, what errors are reported in the event log of the client systems? If
group policy fails to apply, you should see errors in the application event
log.

Yes the app event log has many errors that say "Window cannot determine the user or computer name. Return Value [1722]".

How can the computer NOT know who I am? I am logging in with a 'domain' user account.


Are you configuring settings in the policy under the "user configuration"
portion of the policy?

Yes

What am I not seeing.

Al Taylor