Windows Forum

Ask something
Discussion Locked

Can not get group policys to work...help

0 helpful
3 replies

by dthirlway

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to get group policys to work on a Win2K server, I have 5 WinXP pro w/s that I wont to be able to use policys to turn off my computer networking etc for some users and not for others.

I have gone into active directory and rmb on the Domain and went to properties and them group policys. I then edited the properties of the thing and removed the autanticated users and addted only the students group giving them both the read and apply gorup policy. Then I procced the edit the policy and disabling stuff.

I then loged on using a windows 2000 pro machine and it did not work. I restarted the sever and it no work, I even set the policy to the top one and disalbed the default group policy and told the student policy no overwrite. This still did not work. My domain is just one Server and 5 machines. I dont know what I am doing wrong I only wont to have a simple policy.

Can some one please help me or point me to a good document that will tell me how to set it up.

Thanks.....

3 replies

by pete.cook

I'll try to answer this one using the setup I have. I am the network manager for a large school and I have setup my group policies to act in a manner similar to yours, students have a lot of restrictions, staff have less restrictions.
I created two separate OUs in AD users and computers. One for Students and one for staff.I transferred the users accounts from the users folder to the respective OU. Then I set up policies that are applicable to all users at the root of the site, the top of thelist.
Then, at each of the two OUs added a new group policy. This allows the users who are students and staff to have different settings when they logon to the machines, irrespective of which machine they use.
A good idea is that the domain policy is set to NO OVERWRITE, and don't disable the domain policy.
After you have set up the policies as you think you would like them, open a command prompt and type "secedit /refreshpolicy machine_policy /enforce" and "secedit /refreshpolicy user_policy /enforce". Check in Event log that the policies are successfully applied.
Then go to one of your machines, you can either repeat the secedit commands , or shut down and restart the machine. Both will have the effect of applying the security policies. Then log on with a staff account and see what is available to you. Then log on as a student and again see whether you have the policies in place that you need.
A good tip is only change small amounts at a time and note down what you have changed and where in the policy it is, it will save you time.
Hope this helps.

This discussion is closed to new replies.