Discussion Locked

Win2003 Group Policy Manager

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I am very new to Group Policy Management. I have done the following. Used gpedit.msc to edit the pop-up allow list settings for Admin Templates/Windows Components/Internet Explorer.
I set this for Computer and User configuration.
The problem is that it does not seem to be pushing the policy to any machines. How can I force this and other policies to go into effect?

P.S. I just chose this specific policy to try to get an understanding of the GPO.

Thanks,

Kevin

10 replies

by paul.gormley

Have you checked 'enforced' on each GPO ?

Users may have to log off/on in order for the GPO to take effect.

by weirdo

Are you doing this on individual machines or from a server? cause gpedit.msc applies only to a local machine, like a stand alone workstation. if you doing from a server gpedit.msc is not going to do much for your client machines. right click on your domain in active directory / properties / group policies / open and create GP in there.

regardless the following should allow you to force the update of gp's

to force through your GP to update use

gpupdate /force

you can just type that in run.

by govindaraju.aditya

When we use gpedit.msc, it open's Local Computer Group Policy which applies to users accessing the Windows Server 2003. Once you edit the Group Policies, Type the command gpupdate, which will update the group policy and to see the result what you have updated Type gpresult in command prompt.

Thanks

Aditya

by ishanbg

Did you restart the PC's and check?or you can go to a system and in the command prompt type"gpupdate /force"

by ben_muldoon

I don't know if people replied to this, but what I do is put it into the log in script:
gpupdate /f
Also there is a gpo for update interval for group policy, should be set to 90 minutes.
My best advice is to download the group policy managment console tool which is available with sp1.
Group Policy isn't all that bad as a lot of people make out

by puritat07

When you are using Windows 2003 in domain systems, it is a domain controller. And also, the Group Policy has gone to Domain Policy. Then, if you have to apply the GPO to all the machines in the domain, you will have to apply the GPO in the Domain. It is located in Administrative Tools > Active Directory Users and Computers. You can right-click on your domain and properties, go to Group Policy tab, and you can create, edit or apply the GPO to Domain/OU as you like.

by yatheshat

Apply the policies on the server machine and run the command gpupdate it will help you to solve your problem

by randall.cohen

1. GPOs need to be "linked" to the Orgnaizational Units (OUs) where the computer and user objects are located.
2. From a WXP computer in question open a command prompt and run "gpupdate /force" you may be prompted to reboot or just logoff.
3. User settings may not be applied depending on how the GPOs are being applied, sync or async.
4. There is a tool called PSEXEC that will allow you run Gpupdate remotely and in batch.

This discussion is closed to new replies.