Restriction message repeats while applying Group Policy

[Guest]

My server is running on Windows 2000 Server with 200 user accounts. As I am working in an educational institution, I have applied group policy for the students in OU level. I have enabled many restrictions in the group policy and found working well. But after I enabled the "Disable Control panel" option under Control panel for students OU; the client PC displays the restriction message twice when the student try to access the "My Computer" properties (context menu) and properties in the desktop context menu.

Later I removed the enable (Not Configured) option for "Disable Control Panel" and enabled some other restictions for control panel like disable display in control panel and display only the control panel applets etc. That work fine and displayed the restriction message only once

So I understood the restriction message appear twice only when I enable the "Disable Control Panel" item. What could be reason for the problem. Other than this the policy working well. I haven't made any change in the Domain Controller's group policy.

 

[Steve]

Hi Elizabeth
It may be shown twice because you have disabled access to the control panel
and the property menus on both the desktop and my computer all lead to
settings that can be accessed via the control panel applet

You state you have enabled many restrictions in the group policy perhaps the
combination of settings is the root cause of this.
You don't state if you have configured the default domain policy or how many
GPO's you have applied

Why not create a test user in a test OU under the student OU and create a
new policy with the disable control panel setting,
and apply it to the test OU and log on as the test user and use GPRESULT.EXE
from the resource kit to see what policies are being applied, then look at
the Resultant Set Of Policies (RSOP) that are being applied (3rd party tools
exist for this, although the Group Policy Management Console in Windows 2003
has it build in) you can then review the settings and work out the issue
with out disturbing the rest of the users with undesired results.

(Ps it may be prudent to disable the GPO before reviewing it and making any
amendments, to minimise unexpected effects)

HTH a little

--
Rgds
Steve
Please Reply to Group

My server is running on Windows 2000 Server with 200 user accounts. As I

am working in an educational institution, I have applied group policy for
the students in OU level. I have enabled many restrictions in the group
policy and found working well. But after I enabled the "Disable Control
panel" option under Control panel for students OU; the client PC displays
the restriction message twice when the student try to access the "My
Computer" properties (context menu) and properties in the desktop context
menu.

Later I removed the enable (Not Configured) option for "Disable Control

Panel" and enabled some other restictions for control panel like disable
display in control panel and display only the control panel applets etc.
That work fine and displayed the restriction message only once.

So I understood the restriction message appear twice only when I enable

the "Disable Control Panel" item. What could be reason for the problem.
Other than this the policy working well. I haven't made any change in the
Domain Controller's group policy.