Software only deploying to certain OU's

[Michael Hall]

I have a software install OU, with various OU's under it for each
application.. Office2000, Adobe, Deltaview, ect.

We are upgrading to Office XP so I made a MSI & MST transform and
assigned them a group policy to assign the software to users machines.
Now I created a new Office XP OU with that policy in it, however the
computers ignore this. I don't get any installing managed software.
For testing purposes I assigned other existing group policies to this
OU, none of them applied. No matter what group policys I put in it,
they won't apply to any machine that I move there. I even deleted the
OU and re-created it, no luck. Now if I put my OfficeXP GP in the
Office2000 OU (which has been there previously), it works fine and
installs. So it seems any new OU's I create don't apply GP to them.
The security settings are the same so I don't know what could be
causing this.

 

[Michael Hall]

Domain users has permission to read the group policy. To be sure I
explicitly gave the PC full rights to the group policy object, it
still doesn't attempt to apply.

 

[Michael Hall]

It appears no group policies are working any more. Say I create a
simple policy just to disable the control panel. I make a brand new
OU for this and move the user & the computer to that OU. I run
gpupdate (XP workstation), says it loaded the policies okay but I can
still get into control panel.

 

[Michael Hall]

Hmm.. this seems to do be happening only with Windows XP machines, not
2000. We are using a 2000 server for Active Directory, do we need to
do something special to get group policies to apply on Windows XP?

 

[Tim Springston \(MSFT\)]

Hi Michael-

You don't need to do anything different for your XP clients. I would
suggest looking at a GPRESULT /V (feel free to post the results if they are
not sensitive) to see what, if any, policies are applying and from what
links. This also helps verify that the secure channel is up and running and
to which domain controller it is established to (in case that DC may not
have a complete complement of your group policies due to a file replication
problem).