Policies not working?

[Diane]

I have set user group policies for an OU, but they refuse
work on any computer in the domain, except on the domain
controller. I have Advanced Server installed with SP3,
the user is in the OU, the GPO is linked to the OU, and it
is a user policy.

Any ideas? What am I missing?

 

[Dmitry Korolyov]

Did you try to configure something under User Settings? Then, user accounts
should be under the OU (which means in the OU or somewhere down the tree)
where the policy is applied. The same is for Computer Settings and computer
accounts.

Note that user and computer accounts are by default locater in Users and
Computers CN (Common Name) containers, and therfore do not fall under the
scope of any GPO. Plus, GPO can be only appied to OUs, not to CNs - which
means not to default Users and Computers containers.

 

[diane]

I created a new OU under the domain - the domain still had
the default gp settings. I did not set any override or
blocking settings anywhere.

I created a new user in the new OU, then created a new
policy and changed a couple of user configuration settings
to test the policy.

When I log on as that user to the DC that I was working
on, the policy WORKS. When I log on to another
workstation in the domain, the policy does NOT work. It
was a very simple test policy - limiting what could be
done in IE. Why would it work on one computer and not
another? It is a user (not computer) setting - I checked.

 

[Diane]

I prevented users from running solitaire and from changing
properties for IE. I also took some items off the Start
Menu.

Solitaire runs just fine...on both computers.

 

[Dmitry Korolyov]

get gpresult.exe tool from the Resource Kit and run it under user context to
collect group policy information. You might be able to find a reason for
policies not working this way.