Question

Locked

Group Policy not getting applied

By geniusmind4 ·
Hi everyone,

I am having a huge problem regarding group policies,

I have some students here whom i want to restrict from doing changed to their computers.
What i have done is, made an OU with the name "IT", all the students accounts reside there, they are a member of a group called " Student " which is also located in the same OU. Now i applied some policies using the group policy tab in properties of that OU like restricting them from changin wall paper, specified a wall paper, hide screen saver and appearance tab etc.
But the problem is , its not working I have checked " No Override " and also blocked inheritence but no use , now it has become a mystery ... plzzzz help me out, wht can be the issue.

My Domain controller is win2000 advanced server and clients are using XP .

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Follow this example :)

by Jacky Howe In reply to Group Policy not getting ...

Restrict user to access the internet from Windows Server 2003 Ent.
In Active Directory Users and Computers create a Security Group in Security Group NoIe.

Right mouse click on, on the Domain Name and make an Organisational Unit named NoIe. Right mouse click on it and select Group Policy click on Open.

Right mouse click on Group Policy Objects select New and type in NoIe.

Right mouse click on NoIe and select Edit.

Navigate to User Configuration \Windows Settings \Internet Explorer Maintenance \Connection \Proxy Settings.

Set all instances of proxies to "127.0.0.1" or any non-valid proxy address.

Navigate to User Configuration \Administrative templates \Windows Components \Internet Explorer \Internet Control Panel and disable the Pages that you do not want the User to access especially the Connections Page.

Close the Editor.

Right mouse click on the NoIe Organisational Unit and select Link an Existing GPO and select NoIe.


Add the Users that you do not want to access the Internet to the Security Group NoIe.

Add the Users that you do not want to access the Internet to the Organisational Unit NoIe.

Left mouse click on Start and select Run

Type in gpupdate /force and select OK.

When it has finished updating press n.

Works with XP and Vista

Collapse -

Thanks But.....

by geniusmind4 In reply to Follow this example :)

Well thanks for the reply...... but i dont have to restrict them for internet... that i can easily do with ISA server.... the problem i have applied the policy.....but its not working........wht can be the issue ? do i need to reinstall the DC

Collapse -

It was how the OU's

by Jacky Howe In reply to Thanks But.....

and where the security group settings were applied that you should be looking at. You said that you put the security group in the same OU as the students. Take notice of how I created my OU'S and Security Groups and linked them.

Collapse -

Hey True Blue

by CG IT In reply to It was how the OU's

Obviously this guy from "Pakistan" doesn't know a thing about Group Policy therefore really should learn about it first. Microsoft's Technet can provide this guy from "Pakistan" all the how to articles on Group Policy and also troubleshooting Group Policy.

Since you provided the information on how to create a OU and GPO, how to configure it, then how to apply it and the guy doesn't see that he can do the same thing with any GP he wishes, and he doesn't really want to try either, don't waste your time.

Collapse -

Good point

by Jacky Howe In reply to Hey True Blue

I thought that I was pretty clear in the example. :)

Collapse -

HEY

by geniusmind4 In reply to Good point

Well... are u guys here to help us or crticize.. , wht True blue wrote in his reply , i had already done that .... n there is no difference except tht he put the Security group somewhere else....which he didnt cleared himself he wrote
" Restrict user to access the internet from Windows Server 2003 Ent.
In Active Directory Users and Computers create a Security Group in Security Group NoIe." thts wht u wrote mr True Blue u can check tht urself and tell me where m i suppose to create Security group after reading that ???? ... and the problem is the configuration i wrote was exactly the same which had worked for me in the past with the same DC on another OU with Security group inside the OU .. and as its not working this time... tht gave me curiousity and tht why i asked it here...but reply from Mr CGIT was ridiculous.....

Collapse -

We are here to criticize sometimes....

by CG IT In reply to HEY

If you know anything about Group Policy, then before you implemented it, you would have run the RSoP tool to determine what the result of your policy will be. In doing so, you would have found out that your GPO wouldnt have worked.

So without much further ado read this MS Technet article on Group Policy


http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx?mfr=true

and this one on GP processing
http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx?mfr=true

Collapse -

There are two

by Jacky Howe In reply to HEY

areas for security groups. Built in and under My Business. I normally use the one under My Business. At the moment I am supporting 2000 users with no problems enforcing my GPO's. If in doubt RTFM. CG IT has provided a couple of good links with some good advice. Might I suggest that you follow it.

Collapse -

I don't see any mention of DNS :)

by Jacky Howe In reply to Group Policy not getting ...

No, no reference here about DNS problems. :)

Glad that you got it sorted out. :)

Collapse -

heyyyyy

by geniusmind4 In reply to I don't see any mention o ...

Yeah it was actually the DNS
hey buddy....... how can i mention it...... when i didnt knew it was DNS problem .... lol.. i was applying the policy 100 % correctly like i always do .......but this time it didnt worked......... this is why i was so curious to know tht wht is it in the world thts causing the problem...... n that is why the question is posted here so that different ppl can think of any thing thts possible in this case....
anyways....... thanks God I found n fixed it ..... thanks to u guys as well :)

Back to Networks Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums