Group policy settings not being applied

I had this kind of problem with a 2k3 server ...
I looked in Event Viewer to find some errors. I found error id 1003.
I had installed UPS software before I joined the computer to my domain and it was a software conflict. I joined to domain, reboot and the computer was blocked in "applying computer settings ...". Some java support was bad and UPS software distributed on CD creates the problem.
You must try to collect more details and search on Internet something related to these details.
Another tip: use command-line gpupdate to force Group Policy update with local admin account.

First things first.

Is it a user configuration or computer configuration policy being applied?

If it is both, then the computer account and user account both must be in the OU where the policy is being applied.

Ok Back at it :) Thanks for the responses gents! I am pulling my hair out!!

I checked the event viewer and there are in fact a couple of errors, one of them is this;

None of the IP addresses (192.168.0.1 XX.XXX.XX.XX) of this Domain Controller map to the configured site 'NewWinSite'. While this may be a temporary situation due to IP address changes, it is generally recommended that the IP address of the Domain Controller (accessible to machines in its domain) maps to the Site which it services. If the above list of IP addresses is stable, consider moving this server to a site (or create one if it does not already exist) such that the above IP address maps to the selected site. This may require the creation of a new subnet object (whose range includes the above IP address) which maps to the selected site object.

and the other I will add as a new comment as it will not fit....

Here is the other error...

During the past 4.06 hours there have been 111 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise. Those clients, therefore, have undefined sites and may connect to any Domain Controller including those that are in far distant locations from the clients. A client's site is determined by the mapping of its subnet to one of the existing sites. To move the above clients to one of the sites, please consider creating subnet object(s) covering the above IP addresses with mapping to one of the existing sites. The names and IP addresses of the clients in question have been logged on this computer in the following log file '%SystemRoot%\debug\netlogon.log' and, potentially, in the log file '%SystemRoot%\debug\netlogon.bak' created if the former log becomes full. The log(s) may contain additional unrelated debugging information. To filter out the needed information, please search for lines which contain text 'NO_CLIENT_SITE:'. The first word after this string is the client name and the second word is the client IP address. The maximum size of the log(s) is controlled by the following registry DWORD value 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\LogFileMaxSize'; the default is 20000000 bytes. The current maximum size is 20000000 bytes. To set a different maximum size, create the above registry value and set the desired maximum size in bytes.

I am seriously missing something I see, I just dont understand what changed... our network was down for a couple days last week, and it seems since then that we have had this problem.

Again thanks a ton gents, hope to hear from you soon!
Brent

Mr. BfilmFan, thanks again, I have edited both the computer settings and the user settings via the GPO I created and linked in the OU, (wish I could show you a screenshot here..) in the OU I have the user I have created which all will use in this environment (40 machines in an internet cafe) to login. Does any of this offer any clus as to what I am missing?
THX!
Brent

yet another hopefully helpful comment...

When I am using the AD users and computers snap-in and viewing the computers on the domain, I try to 'manage' one of them via the snap in and it tells me it cannot find the network path... just to clarify, I right click on the computer in the snap in, choose manage, and it cannot find it, lol. It is a machine I just removed and re-added to the domain, have disabled the security service and there is no other firewall running on the target machine that could to my eyes prevent access.

I ran an RSOP on one of the machines in the domain, logged in as local admin, and this is what came back... (next comment)

User Policy Refresh has completed.
Computer Policy Refresh has completed.
C:\Documents and Settings\Admin>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 13/01/2006 at 5:19:59 PM
RSOP results for D3\Admin on D3 : Logging Mode
OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: WIN
Domain Type: Windows 2000
Site Name: Win1Site
Roaming Profile:
Local Profile: C:\Documents and Settings\Admin
Connected over a slow link?: No
COMPUTER SETTINGS
Last time Group Policy was applied: 13/01/2006 at 5:19:37 PM
Group Policy was applied from: WINSERV.Win.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects

N/A
The following GPOs were not applied because they were filtered out

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
D3$
Domain Computers

USER SETTINGS
Last time Group Policy was applied: 13/01/2006 at 5:19:37 PM
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects

N/A
The following GPOs were not applied because they were filtered out

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:

None
Everyone
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL

Hehe, interesting, MSN seems to see a problem on the network saying the gateway is offline when troubleshooting..... does that help?

This question was closed by the author