having issues with default domain policy and a sub OU policy

[Guest]

hi,
At the school we run a very basic group policy from a windows 2000
server/AD, most of the settings we need about the school are applied via the
default domain policy but i am trying to make things a little more
personnalised, we have a group of 16 laptops i am trying to get a custom
start menu to run on instead of the one that is detailed in the DDP.

the laptops are in their own OU, and i have build them their own group
policy file which contains all the setting we need to set up, and details on
the new redirection for the start menu. i have set up the group that the
redirection applies to, i have told it to block the DDP on that OU, and
enforced the policy for the laptops in that OU. But i cannot get it to apply
anything other than the DDP to anything in that OU.

this is a copy of the error message i am getting when i do a group policy
result test

first one

The Group Policy client-side extension Folder Redirection failed to execute.
Please look for any errors reported earlier by that extension.

second one

Failed to perform redirection of folder Startup.
The new directories for the redirected folder could not be created.
The folder is configured to be redirected to <\\W2ks3\Profiles\Pupils\Start
Menu\Programs\Startup>, the final expanded path was
<\\W2ks3\Profiles\Pupils\Start Menu\Programs\Startup>.
The following error occurred:
Access is denied.

now that w2ks3\profiles\pupils is from the DDP not from the policy for the
the OU for the laptops which is set to w2ks3\profiles\sciencelaptops

if i check the summary i get the following information from it

applied GPOs
name = default domain policy
link location = deacons.peterborough.sch.uk

but it should be
name = sciencelaptops
link location = sciencelaptops.deacons.peterborough.sch.uk

i have the following book group policy,profiles and intellimirror by jeremy
moskowitz but cant find anything that will help...

many thanks if you reply, i have msn messager if you can help over that.
andy baldock
deacons school

 

[barabba72]

Hi,

whatever your problem is, one thing you should not really do is using
the Default Domain Policy to modify GP for your domain other than
domain wide security settings (which can't be bypassed by blocking
inheritance).

Bye

 

[Guest]

thanks for the reply,[email protected] its pointing me in the right
direction.

so next part of the question

so what are you ment to do to set some things from the top of the tree, when
i use to use novell this was easy to assign which group policy had control
over the items, i just cant seen to make the local one over ride the master
one in the DDP, are you trying to say i should just set still like proxy only
in the DDP and then make more OU's under there for stuff like custom start
menus?

i mean if i could just stop the custom start menu from the ddp that would be
a start for me then i could just copy the start menu onto the allusers group
on the 16 laptops and save my self the time of messing about with this
"shockingly poor" system, hate to say it but novell got this bit right...
(sorry bit of a rant spent 8 hours messing about looking at this...... drives
you insain after a while when the book you read says it should work, all the
websites you read says it should work... but it dont) even tried on the 2
test machines and domain at home still the same... i cannot make it over ride
the DDP.

there is not some silly switch that can be set in the DDP that is a master
override? a allsinging you will use this even if you dont want to setting?