Policy not enforced!

[aptrsn]

I am currently setting up our AD structure on a new 2003 Server and testing
some simple Group Policies. I have created a relatively restricted user
policy that prevents things like allowing the users to tinker with display
properties, active desktop, removes Network Neighborhood from desktop, etc.

I have linked and enforced this policy to an OU called "Restricted Users"
which contains a group called 'test restricted'. I assigned a test login
account to that group and then logged into a Windows 2000 workstation to see
if the policy was enforced, at it wasn't. I tried using the Group Policy
Results wizard by came up with the error "The selected computer does not
support RSoP logging." Anyone have an idea as to the best way to
troubleshoot policy enforcement for users on Win 2000 workstations?

 

[aptrsn]

Figured it out, at least I think I did. It turns out that the policy linked
to the OU is not enforced on the group (at least a Security group - Global).
Once I placed the user object in the group, it worked like a charm! Also,
had I worded my seach criteria in Google correctly when looking into this
problem, I would have found the answer already... DOH!