GPO for OU's not working correctly.

  • Thread starter Thread starter wickid
  • Start date Start date
W

wickid

Hello,

I am very new to AD and have setup one of my PC's at home to act as a
2000 Server Domain Controller. The other PC's are running Windows XP
Pro and have joined the domain. I created a Test OU through AD Users
and Computers and moved a test user into that OU. I went to properties
and modified the GPO for the OU so that I would force a certain screen
saver to run after a set amount of time. After I make the changes, I
exit out of everything after applying the settings. I run secedit to
refresh the policies. When I attempt to login to any of the Windows XP
workstations, the policy does not take effect. I have tried rebooting
and logging in multiple times on the XP systems with no luck.

The odd thing is if I use the test user account and log into Windows
2000 Server, the policy changes does take effect to the user account.
If I use the test account after the change was applied in Windows 2000
Server, and log it into the workstation, the change is carried to XP.
I am really unsure of what I am doing wrong and what needs to be done
to fix this issue.

Any advice would be greatly appreciated.

wickid
 
Hello Wickid,

Are you getting any errors on the XP machine within the event logs?
Can you run gpresult on the client machine to make sure that the policy
is indeed applying to the user.
You can also enable userenv logging on the client machine
http://support.microsoft.com/kb/q221833/
You have not mentioned if this setting was set in the user
configuration or the computer configuration.
You mention that the settings take effect on the W2K but not on the XP
From your post the W2K is the domain controller and should reside in
Click to expand...
the Domain Controller OU but you mention that you have linked this
policy to the test OU.
Need more info to determine what is going on here.
If you would like, you can email me the results, from my profile just
add kid after cisqo

Good luck

Best,
Harj Singh
"Power Your Active Directory Investment"
Special Operations Software
www.specopssoft.com
 
Back
Top