Group Policy Problem

K

Know1

I have a problem with my W2K workstations not processing group policy
past the "Default Domain Policy". I have set up organizational units as
follows.

ourdomain.local --> Contains the "Default Domain Policy"
Accounts
- Accounting
- Admins
- General Purpose
- Managers
- Production
- Purchasing
- Sales --> Contains "Sales Group Policy" (Let
salespersons be local admins to their W2k workstations using restricted
groups)
Builtin
Computers
Domain Controllers --> Contains "Default Domain Controllers Policy"
ForeignSecurityPrinciples
Resources
- Admin Consoles
- Exempt
- Printers
- Servers
- Workstations --> Contains the "Workstation Group
Policy" (Under Computer Configuration, set DNS server via VBS script, Use
internal Software Updates server) (Under User Configuration, disable access
to a: & b: Drives.)
Users


The problem I'm having is only the "Default Domain Policy" settings are
applied (both Computer Settings and User Settings). The "Workstation Group
Policy" processes only the "Computer settings" section of the group policy.
Why is the "User Settings" Section of the "Workstation Group Policy" not
being applied? How could I troubleshoot this issue.

Thank you in advance,

Mike...
 
S

Steven L Umbach

Group Policy will only apply to domain users and those domain users must be
within the scope of influence of the Group Policy. In other words if you
configure a Group Policy for am OU with user configuration, then the user
accounts must exist in that OU or a child OU. You can use the gpresult tool
while logged on as one of those users or a test user with the same policy
applied to see what Group Policies are being applied to the user and
computer, from which domain controller and the last time the policy was
applied. Also make sure that the user configuration portion of the Group
Policy is enabled. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709 -- gpresult
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top