Browser·1,292 discussions

Win2003 Group Policy Manager

Locked

Hi,

I am very new to Group Policy Management. I have done the following. Used gpedit.msc to edit the pop-up allow list settings for Admin Templates/Windows Components/Internet Explorer.
I set this for Computer and User configuration.
The problem is that it does not seem to be pushing the policy to any machines. How can I force this and other policies to go into effect?

P.S. I just chose this specific policy to try to get an understanding of the GPO.

Thanks,

Kevin

Topic

Enforced ?

In reply to Win2003 Group Policy Manager

Have you checked ‘enforced’ on each GPO ?

Users may have to log off/on in order for the GPO to take effect.

reply

In reply to Win2003 Group Policy Manager

Are you doing this on individual machines or from a server? cause gpedit.msc applies only to a local machine, like a stand alone workstation. if you doing from a server gpedit.msc is not going to do much for your client machines. right click on your domain in active directory / properties / group policies / open and create GP in there.

regardless the following should allow you to force the update of gp’s

to force through your GP to update use

gpupdate /force

you can just type that in run.

Group Policy Management Console

In reply to Win2003 Group Policy Manager

You will have use the Group Policy Editor for Domains and apply for individual OUs or the entire Domain (as the case maybe)

You can use the Group Policy Management Console tool (from Microsoft) to add, manage your Group Policies on your domain.

http://www.microsoft.com/downloads/details.aspx?familyid=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

How to apply a Group Policy in Windows 2003 server

In reply to Win2003 Group Policy Manager

When we use gpedit.msc, it open’s Local Computer Group Policy which applies to users accessing the Windows Server 2003. Once you edit the Group Policies, Type the command gpupdate, which will update the group policy and to see the result what you have updated Type gpresult in command prompt.

Thanks

Aditya

Win2003 Group Policy Manager

In reply to Win2003 Group Policy Manager

Did you restart the PC’s and check?or you can go to a system and in the command prompt type”gpupdate /force”

Hi Kevin

In reply to Win2003 Group Policy Manager

I don’t know if people replied to this, but what I do is put it into the log in script:
gpupdate /f
Also there is a gpo for update interval for group policy, should be set to 90 minutes.
My best advice is to download the group policy managment console tool which is available with sp1.
Group Policy isn’t all that bad as a lot of people make out

Re: W2k3 GPM

In reply to Win2003 Group Policy Manager

When you are using Windows 2003 in domain systems, it is a domain controller. And also, the Group Policy has gone to Domain Policy. Then, if you have to apply the GPO to all the machines in the domain, you will have to apply the GPO in the Domain. It is located in Administrative Tools > Active Directory Users and Computers. You can right-click on your domain and properties, go to Group Policy tab, and you can create, edit or apply the GPO to Domain/OU as you like.

Thanks to everyone

In reply to Win2003 Group Policy Manager

Thank you! You guys helped a lot!

Kevin

up date the group policies

In reply to Win2003 Group Policy Manager

Apply the policies on the server machine and run the command gpupdate it will help you to solve your problem

applying GPOs

In reply to Win2003 Group Policy Manager

1. GPOs need to be “linked” to the Orgnaizational Units (OUs) where the computer and user objects are located.
2. From a WXP computer in question open a command prompt and run “gpupdate /force” you may be prompted to reboot or just logoff.
3. User settings may not be applied depending on how the GPOs are being applied, sync or async.
4. There is a tool called PSEXEC that will allow you run Gpupdate remotely and in batch.

[Author]

Replies