GPO not applied HELP!

[Guest]

I have a new win2k domain on one DC. I have created 2 OU's
staff & students. I have also created 2 gpo's in the mmc
and applied one each to the above OU's in AD Users &
Computers. The policy is listed in SYSVOL.

When I test the policies on a PC as both Staff & Student
users no policies are being applied.

Can anyone help??

TIA

 

[Buz [MSFT]]

Most common cause for group policy failure would be that DNS is not setup
correctly. You need to have DNS installed on the DC and the DC should point
to itself for DNS. You should setup forwarders within DNS to point to the
ISP.

237675 Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?id=237675

If third party DNS server:

- Must support SRV RR (RFC 2052).

- Supports dynamic update protocol (RFC 2136).


Clients should only point to the DC for DNS.

Then refresh DNS on the server:

Net Stop Dns
Net Start Dns
Net Stop Netlogon
Ipconfig /flushdns
Net Start Netlogon
Ipconfig /registerdns

Then refresh on the client:

Net Stop Netlogon
Ipconfig /flushdns
Net Start Netlogon
Ipconfig /registerdns

See if the policies are applying, if not go further......


Are there errors in the application log in regards to userenv and scecli?
Please provide the exact details within the errors if so and let us know the
polices that you are trying to push.

250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842


If the above does not help enable Userenv logging on the client, log in
verify you did not get the policies. Repost with that Userenv.log and the
name of the user
account you are testing with.

221833 How to Enable User Environment Debug Logging in Retail Builds of
Windows
http://support.microsoft.com/?id=221833

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Guest]

THANKS SO MUCH.

I have the old domain still running, it has DHCP running
so ofcourse that was the problem. CLients have the old
domain DNS server set there!!

Thanks again for your speedy reply

 

[Buz [MSFT]]

Sweet, always glad to help.

- Buz

THANKS SO MUCH.

I have the old domain still running, it has DHCP running
so ofcourse that was the problem. CLients have the old
domain DNS server set there!!

Thanks again for your speedy reply