Networks

Ask something
Discussion Locked

Tredding through Group Policy!!

0 helpful
4 replies

by peter_maryan

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Alrighty, Now that i think i got some of it down, I have another question.

Server- Windows 2003 Enterprise
Client- Windows XP Pro SP1

Fresh install of both, for testing purposes and my learning.

I am having FRUSTRATING problems, with my lack of knowledge on AD and group policy, and need some help!!

Client: PO-LDEVUYST
Server: WPC-AD
Domain Name: WPC.ORG

When I installed WinXP on PO-LDEVUYST, I told it that it belong to a domain named WPC, It registered the computer and it showed up in the active directory in the container named "Computers".

I then made a new OU named "Pastors", and moved PO-LDEVUYST from "Computers" to "Pastors". In the new "Pastors" bucket, I created a user named "ghubbard" and told it to change the password on next login. "Ghubbard" has the rights of Domain User.
I then right clicked on the "Pastors" OU and created a new Policy and edited the User Settings portion of it to fit my needs. I chose No Overrides on the policy, and also for the security of the policy added "Domain Users" with the rights of Read and Apply Policy.

When i went to my fresh install of WinXP, and logged in with "ghubbard" and it asked me to change my password, which I was happy, thinking that its going to apply the policy and all will be happy, however I changed the password successfully, then it hung up for a minute or two when it was "Applying Personal Settings" and then logged into a normal WinXP Fresh Install. Not applying my modified policy.

What am I doing wrong...Ive read the white pages, but I dont see my problem included in it... Help me out... Its worth 400, and if the answer fixes my issues, ill raise the points.

4 replies

by xsive

Is the New policy you created linked to the Pastors OU? I've made this mistake a few times myself. :)
If it is check your loopback policy setting to make sure the gpo is not being overwritten by the local computer policy.

If you have not edited the default domain policy to affect user settings I would not use the No override feature, this can get messy when you have multiple policies. A well planned and implemented group policy structure would use blocking of inhreritance and no override settings sparingly.

cheers,
Xs

by xsive

If you go into group policy management you will be able to see the group policies and the group policy links. This will tell you which OU's have the policies linked (set) to them.
A good tool to use in this situation would be the Group Policy results Wizard. Using this you can select your computer and user and get a resultant set of policies to see exactly what would be applied.
Shout up if you need any more explanation.

cheers,
Xs

by peter_maryan

How do i check to see if it is linked to it. I believe it is, as it shows up in the box when i right click on the OU Pastors and choose properties, and click on group policy, it shows it as being listed there.

This discussion is closed to new replies.