Networks

Ask something
Question Locked

Group Policy not getting applied

0 helpful
12 replies

by geniusmind4

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi everyone,

I am having a huge problem regarding group policies,

I have some students here whom i want to restrict from doing changed to their computers.
What i have done is, made an OU with the name "IT", all the students accounts reside there, they are a member of a group called " Student " which is also located in the same OU. Now i applied some policies using the group policy tab in properties of that OU like restricting them from changin wall paper, specified a wall paper, hide screen saver and appearance tab etc.
But the problem is , its not working :( I have checked " No Override " and also blocked inheritence but no use , now it has become a mystery ... plzzzz help me out, wht can be the issue.

My Domain controller is win2000 advanced server and clients are using XP .

12 replies

by rob miners

Restrict user to access the internet from Windows Server 2003 Ent.
In Active Directory Users and Computers create a Security Group in Security Group NoIe.

Right mouse click on, on the Domain Name and make an Organisational Unit named NoIe. Right mouse click on it and select Group Policy click on Open.

Right mouse click on Group Policy Objects select New and type in NoIe.

Right mouse click on NoIe and select Edit.

Navigate to User Configuration \Windows Settings \Internet Explorer Maintenance \Connection \Proxy Settings.

Set all instances of proxies to "127.0.0.1" or any non-valid proxy address.

Navigate to User Configuration \Administrative templates \Windows Components \Internet Explorer \Internet Control Panel and disable the Pages that you do not want the User to access especially the Connections Page.

Close the Editor.

Right mouse click on the NoIe Organisational Unit and select Link an Existing GPO and select NoIe.

Add the Users that you do not want to access the Internet to the Security Group NoIe.

Add the Users that you do not want to access the Internet to the Organisational Unit NoIe.

Left mouse click on Start and select Run

Type in gpupdate /force and select OK.

When it has finished updating press n.

Works with XP and Vista

by geniusmind4

Well thanks for the reply...... but i dont have to restrict them for internet... that i can easily do with ISA server.... the problem i have applied the policy.....but its not working........wht can be the issue ? do i need to reinstall the DC :/

by rob miners

and where the security group settings were applied that you should be looking at. You said that you put the security group in the same OU as the students. Take notice of how I created my OU'S and Security Groups and linked them.

by cg it

Obviously this guy from "Pakistan" doesn't know a thing about Group Policy therefore really should learn about it first. Microsoft's Technet can provide this guy from "Pakistan" all the how to articles on Group Policy and also troubleshooting Group Policy.

Since you provided the information on how to create a OU and GPO, how to configure it, then how to apply it and the guy doesn't see that he can do the same thing with any GP he wishes, and he doesn't really want to try either, don't waste your time.

by rob miners

I thought that I was pretty clear in the example. :)

by geniusmind4

Well... are u guys here to help us or crticize.. , wht True blue wrote in his reply , i had already done that .... n there is no difference except tht he put the Security group somewhere else....which he didnt cleared himself he wrote
" Restrict user to access the internet from Windows Server 2003 Ent.
In Active Directory Users and Computers create a Security Group in Security Group NoIe." thts wht u wrote mr True Blue u can check tht urself and tell me where m i suppose to create Security group after reading that ???? ... and the problem is the configuration i wrote was exactly the same which had worked for me in the past with the same DC on another OU with Security group inside the OU .. and as its not working this time... tht gave me curiousity and tht why i asked it here...but reply from Mr CGIT was ridiculous.....

by cg it

If you know anything about Group Policy, then before you implemented it, you would have run the RSoP tool to determine what the result of your policy will be. In doing so, you would have found out that your GPO wouldnt have worked.

So without much further ado read this MS Technet article on Group Policy

http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx?mfr=true

and this one on GP processing
http://technet2.microsoft.com/WindowsServer/en/library/89d7ec5f-a909-4f61-aded-c5b69f5f730b1033.mspx?mfr=true

by rob miners

areas for security groups. Built in and under My Business. I normally use the one under My Business. At the moment I am supporting 2000 users with no problems enforcing my GPO's. If in doubt RTFM. CG IT has provided a couple of good links with some good advice. Might I suggest that you follow it.

by rob miners

No, no reference here about DNS problems. :)

Glad that you got it sorted out. :)

by geniusmind4

Yeah it was actually the DNS
hey buddy....... how can i mention it...... when i didnt knew it was DNS problem .... lol.. i was applying the policy 100 % correctly like i always do .......but this time it didnt worked......... this is why i was so curious to know tht wht is it in the world thts causing the problem...... n that is why the question is posted here so that different ppl can think of any thing thts possible in this case....
anyways....... thanks God I found n fixed it ..... thanks to u guys as well :)

by rob miners

Sometimes the problem isn't obvious until you go looking. :)

This discussion is closed to new replies.