Registry Settings in GPO not taking effect

[Robert Gowdey]

Under Computer Configuration..\..Registry

I added a Key...I set up the permissions for said key to over write and
propigate.

The key is not located on the client machine and it's been more than a few
days. All my refresh intervals for Domain Controllers, Users, Domains,
Machines, etc etc etc are all set to 0 and I used secedit to refresh both
machine/user policies immediately.

under the same area there is a Computer Configuration..\..Files

I have created a folder "%System Root%" and with it assigned specific
permissions different from what's default on the client machine. This
WORKS!!! Why doens't the registry one work? D:

 

[Nick Finco [MSFT]]

You say that the key is not located on the client machine. Do you mean that
the key still needs to be created? If that's the case, security policy
won't work because it won't create keys, only change their permissions. If
the key does exist, look in the log at %windir%\security\logs\winlogon.log.
If that doesn't exist, you need to turn on logging.
http://support.microsoft.com/default.aspx?scid=kb;en-us;245422 Look in the
log and see if there are any errors while policy was propagating to your
client.

N

 

[Robert Gowdey]

I didn't know the key had to exist. Thank you so much. Also for your
second piece of advice. I've learned logs are your best friends. People
tend to forget that.