OU Policy not applied in 2000 AD mixed mode

[Steve]

Hi there,

I am trying to apply a lockdown policy to some terminal
servers using group policies. Our AD is in mixed mode
while we transition fully to AD in the next 6 months from
NT4 domain.

I have: Created a new OU called "Term"
Created a GPO for "Term", made my changes and checked the
box "block policy inheritance"
On the domain GPO, I have unchecked the "no override" box.
I have added the servers to the OU "Term"

But the changes are not apparent on the machines after
logging on. What could this be?

 

[Vera Noest [MVP]]

Have you applied loopback processing of the policy, with the
Replace option?

231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

 

[Joe Snuffy]

Is your new OU "Term" directly under the domain in the tree? If you
placed it witin another OU, like "Servers" for example and then
applied the GPO to "Term" the policies will not apply until the domain
is placed in Native Mode. OU nesting is not supported in Mixed Mode;
therefore, GPOs applied to a nested OU will either not function as
expected or not function entirely.

Hope it helps...

 

[Steve]

I have applied the loopback option without success. Any
other ideas? The OU sits just beneath the domain, so it is
not nested. Is there any other reasons that may cause
problems in mixed mode?