software restriction policy not working when running default domain policy from XP PC

[Gary Massengale]

I am new to GPO's so bare with me.

I have a Windows 2000 domain. Windows 2000 servers, clients are some XP and
a few 2000 and the rest 98.

I am trying to apply a software restriction policy on the XP workstations.
I had read that if you run the GPO from XP you get more selections than
running it from the 2000 servers.

I followed Microsoft Knowledge Base article 307900-upgrading windows 2000
group policy for Windows XP- and selected the default domain policy to add
to my XP machine.

It appears to have worked, in that I can open the default domain policy from
m XP PC and see the software restriction polciy I created. I used hash rule
to try to block solitaire, security level is disallowed.

I do gpupdate.exe from the command prompt to update the policy and still
doesnt work.

I did gpresult.exe /scope computer and it says
group policy was applied from: (e-mail address removed), which is one of my
win2000 servers.

shouldnt it state that the policy was applied from my XP PC?

any help would be appreciated.

gary

 

[Steven Umbach]

The policy is being managed by your XP Pro computer but it was actually
configured in the domain policy and your gpresult is showing the correct
results. Try using gpupdate /force or reboot the computer. The link below goes
into good detail on Software Restriction Policies. Try doing some path rules
also. The hash rule file must be exactly the same on the target computer as
shown in Group Policy. A W2K computer file would probably be different than a XP
file of the same name. Also check your enforcement rule which may be exemption
local administrators in case you are logged on as one when trying out the SRP
setting. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

 

[Gary Massengale]

thanks for the info

gary

The policy is being managed by your XP Pro computer but it was actually
configured in the domain policy and your gpresult is showing the correct
results. Try using gpupdate /force or reboot the computer. The link below goes
into good detail on Software Restriction Policies. Try doing some path rules
also. The hash rule file must be exactly the same on the target computer as
shown in Group Policy. A W2K computer file would probably be different than a XP
file of the same name. Also check your enforcement rule which may be exemption
local administrators in case you are logged on as one when trying out the SRP
setting. --- Steve

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx