Networks

Ask something
Discussion Locked

Group Policy Help for a NEWB!!

0 helpful
5 replies

by peter_maryan

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Clients Using Windows XP Pro, Server running Windows 2000 Server

Hello,

I need some help with group policy.

First off, i setup my AD for the first time, and I want to use group policy for the client machines.

I setup group policy "User Configuration" settings on the client machines, however it seems to only take those settings if i login on using a local account, such as Administrator.

If I login using a domain account, it doesn't use those settings. When I look at the AD, I put a user "ghubbard" in a group "pastors" and selected default domain policy for the "pastors" group. I have edited the default domain policy to be somewhat similiar to that of the machines user policy, but it still doesnt take when I login, and on top of that it takes at least two minutes sitting at the screen "loading your personal settings" I must have done something wrong..... HELP!!!!

5 replies

by bfilmfan

You don't specifically apply group policies to objects, but you can exempt them from reading a policy.

You need to apply the GPO on an Organizational Unit container, generally. You can apply it also at the domain or Active Directory site level, but I don't recommend doing so until you are experienced enough to know when to use what where.

Did you make any changes to the Default Domain Plociy itself? If you did, you will need to replace it with the steps detailed in the article listed below:

http://www.winnetmag.com/Article/ArticleID/41878/41878.html

Okay, to test GPO's you will need to create an Organizational Unit. You can follow the steps as detailed here in the AD Ops Guide:

http://www.microsoft.com/windows2000/techinfo/administration/activedirectory/adops.asp

This guide will give you a better understanding of GPO's:

http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolwp.asp

Once you have created your OU, place the test USER account and workstation you will be testing in that OU. Then make all of your GPO changes on that OU.

Always remember that the GPO is attached to an AD container object local, site, domain and OU is how they are applied. They aren't applied to groups, per se.

by bfilmfan

Some settings are in the System Configuration and some are in the User configuration.

If you login locally to the system, you will get the resultant set of the local security policies, domain and OU policies which have been applied to it previously.

by peter_maryan

Ok, so the other part of my question is, do I modify the "user configuration" and the "computer configuration", or whatever i need to makeup my settings, on the OU.

If that is correct, then why would i modify a machines user config or machine config? Is this only used if i am using a local login at all times, such as a terminal at a library?

This discussion is closed to new replies.