Group Police Effect

  • Thread starter Thread starter Roma
  • Start date Start date
R

Roma

Hi all
I have problem with the group police effect , i have OU's
and each has group police , the effect for group police
for OU not working , all my changes for it dosen't take
any effect why , and this is the same problem with the DC
group POlice any changes , no any effect
How i can fix the problem.
Pls help.
 
The user/computer that you are trying to enforce the policy on must be within the
scope of influence of the GPO. For instance if you configure Group Policy for an OU,
the user or computer must reside in that OU structure. Keep in mind that for domain
user accounts that password/account policy can only be applied at the domain level.
Nediag and gpresult are two great tools to troubleshoot GP problems. I would run
netdiag on the computer you are having a problem with first looking for any failed
tests that may indicate why policy is not applying to that machine or user logging
onto the machine. In particular look for failed tests/errors for dns,dclist, and
domain membership. Gpresult will show where policy is being applied to a
user/computer and the last time policy was refreshed. Remember policy will not be
applied immediately though a reboot. logoff/logon, or using secedit can speed up most
policy propagation. -- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301423 --- works on non
servers also.
 
Thank's for you

But the GP it was worked perfect , but the server it was
hacked. i used the Tools it's gave me all test ok
but any changes to the GP no any effect , thsi the
problem .
-----Original Message-----
The user/computer that you are trying to enforce the policy on must be within the
scope of influence of the GPO. For instance if you
Click to expand...
configure Group Policy for an OU,
the user or computer must reside in that OU structure. Keep in mind that for domain
user accounts that password/account policy can only be applied at the domain level.
Nediag and gpresult are two great tools to troubleshoot GP problems. I would run
netdiag on the computer you are having a problem with first looking for any failed
tests that may indicate why policy is not applying to that machine or user logging
onto the machine. In particular look for failed
Click to expand...
tests/errors for dns,dclist, and
domain membership. Gpresult will show where policy is being applied to a
user/computer and the last time policy was refreshed. Remember policy will not be
applied immediately though a reboot. logoff/logon, or
Click to expand...
using secedit can speed up most
 
Other things to check for a Group Policy problem include that the GPO is linked to
the container, that the policy is enabled in the Group Policy options page, that
computer and or user configuration is enabled in Group Policy properties page, that
"no override" is not selected for a GPO in the Group Policy options page at a upper
level such as domain that may not allow the changes to take effect if they are
defined in the GPO where no override is configured, and that the user/group has
read/apply permissions and no "deny" permissions to the GPO in the
properties/security page. Normally "authenticated users" has read/apply permissions.
Domain computers are also members of the authenticated users group. The everyone
group should have read permissions to the sysvol share on the domain controller and
authenticated users need at least read/list/execute ntfs permissions to it. Also
check the Event Viewer on the domain controller for any pertinent error messages. The
links below may be helpful. --- Steve

http://www.microsoft.com/windows2000/techinfo/planning/management/groupsteps.asp
http://support.microsoft.com/default.aspx?scid=KB;EN-US;q250842&
 
Back
Top