group policy not being applied on wkstn

[krzys]

i have a very small w2k network. i have an active
directory domain with a w2k server and 8 w2k-pro wkstns. i
setup a group policy on the server, under a container
where the users are, to restrict certain users from
getting the IE icon being displayed on the desktop. i am
in the process of testing this and when the user logs into
the server, the policy seems to work fine and the user
does not get the IE icon. when the user logs into the
wkstns, the policy does not seem to work and the IE icon
appears everytime. what do i need to do to make the group
policy work on the wkstns? thanks in advance.

 

[Brian Desmond [MVP]]

You say you linked the GPO to a container. This is the issue. Group Policy
objects can only be linked to OUs (organizational units).

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[krzys]

it is linked to an ou...that is why it is puzzling. i
created a new ou called nurses, then right clicked on it
and created the group policy. when the user logs in to the
server it works, but when he/she logs in to the wkstn, it
does not...

 

[Brian Desmond [MVP]]

Did you alter settings in the computer policies section or user policies
section of the GPO?

Is DNS working properly (is the machine pointed at your internal DNS)?

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[krzys]

i altered the user policies and my wkstns are pointing to
the server in that room for DNS resolves.

 

[krzys]

brian,
when i login as the user on the wkstn and run
the "gpresult" utility, the "Security group membership" fo
that user comes back with nothing, yet i know that the
user does blong to 2 groups on the active directory. could
this be the problem?

 

[Ken F]

Make sure both user and computer account are in the OU you created

 

[Brian Desmond [MVP]]

So, User policies will only apply to user accounts in the OU you linked the
GPO to. Likewise, computer policies will only apply to computers in the OU
you linked the GPO to. If you need to apply user policies on a per machine
basis, browse to the computer config section/admin templates/group policy,
and enable Loopback Processing. This will apply user settings to users that
logon to affected machines.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com