Group policy not happening

[Michael Nealy]

I have a w2k server (Active Directory) running ISA & backoffice. I have an
OU with my computers and users located inside. When I login as one of the
users they login into the domain, but they do not receive any of the policy
changes I have set. How do I find out what could be wrong? Or how do I fix
it.

Also how do I prevent my users from saving information to the desktop? I
have removed access to the c drive and hidden the c drive.

Thanks Mike

 

[Steven L Umbach]

First off account/password policy can only be set at the domain level so if those
changes are not happening that is to be expected. Otherwise make sure that your dns
configuration is correct with the domain controller pointing to itself as it's
preferred dns server and the domain computers pointing only to the domain controller
as their preferred dns server in tcp/ip properties. Ipconfig /all is a quick way to
check. Otherwise check that the GPO for the OU is linked to the OU, that the policy
itself nor computer or user configuration are disabled, and that no override is not
selected for a GPO at the domain level that has the same defined settings, and that
the appropriate user/group has read and apply permissions to the GPO and no deny
permissions. Gpresult will also help by showing where policies are being applied from
and the last time they were applied. Gpresult /u /v is helpful in seeing what defined
settings are being applied to the user. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709

 

[adoyt]

To see what policies are being applied to the user that's
logged in, run the command: gpresult.

Remember that security settings take either a reboot or a
manual refresh using secedit.