Group Policy In Windows 2000 Server

If you download Group Policy Management Console (GPMC) from Microsoft's site, your life will be much easier. You will be able to see how GP will affect your users and computers. You may run GPMC in modelling mode or reporting mode. Note that GP consists of two parts:
1. Computer policy which runs when computers start
2. User policy which run when users log in.

You may also need to wait while GP is replicated to all domain controllers in you network.

Some GP setting don't work over slow links.

Some settings may have been marked as no-override at the upper level, which would prevent changing at lower level in your AD hiararchy.

I tried installing GPMC on my win 2k Pro and It did not allow me to install. It wants to run In win 2003 and win xp pro.

Point value changed by question poster.

You have to make sure that all users/computers you want to apply that policy should be in the specified OU.

You should do that -> asigning GPOs <- from the server, not from your machine, as you don't have a proper MMC console on it to display the services on the server, not on the desktop computer. This can be done, but you should check in the technet about "customized MMC console" and "taskpads". This is going to give you the answer about the GPMC that is not performing the installation on your desktop computer.

About the rest, how you should configure users/computer rights within the GPO, I don't think you need more instructions. As for now, just remember - computer policies are applied once (when starting/rebooting the computer), and the users policies are applied everytime a user logs on the network from any computer he might use. It's like a "follow-me red car" when you apply GPOs at the user level.

secedit /refresh MACHINE_POLICY /enforce

or

secedit /refresh USER_POLICY /enforce

from the domain controller

This question was closed by the author