Windows Forum

Ask something
Discussion Locked

Domain Group Policy

0 helpful
7 replies

by dschwer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello all

I am running into a problem when I assign a security group policy to my domain. I edit the default security policy for the domain but the policy only propogates out to the domain controller and not to the other machines on my domain. The other machines can see the Domain controller as they can log into the domain. Any help would be appreciated.

Dale

7 replies

by erikbutler

there si the possibility that the other domains are blocking inheritance policies. Go to the default Domanin policy and select the box to NO OVERIDE and this will keep this from happening

by ian mclaws

Editing the default policy is only one step, you have to apply it. First, may I suggest you leave the default as a default and create a new one?
Microsoftese says you should create an OU for policies, but this is more applicable in a large environment (multiple domains)
To implement your policy, go to the property pages of the OU you want to apply the policy to, select the policy tab, and add the policy you want. You can also create a new policy here, which is then available to be applied to any other OU by browsing from THEIR policy tabs.
The term "Default" isn't really accurate here. The default is more like a template. Once configured, it has to be applied at the OU level or below.

Good luck,

Ian

by dschwer

I did all those things and it still wont propogate out to my domain machines just my domain controller??????
Anything else I could be missing

by rvkempen

This "might" be a very stupid question, but areyou using w2k clients?
If you're not, you have to use the good old fashioned policy files, since domain and gpo policys do not work on w9X.

Sorry if it was a stupid question, but otherwise it shouldwork like a charm, unless youre w2k client are loging in to a different domain.

Anyway, good luck.

Greets Ron.

by dschwer

All my clients are W2k. Could roaming profiles or DNS affect GPO's. Also you talk about applying my policy. I just have to click ok to assign the policy after I create it, right? Am i missing a step.

Thanks for all the help

Dale

This discussion is closed to new replies.