Most common cause for group policy failure would be that DNS is not setup
correctly. You need to have DNS installed on the DC and the DC should point
to itself for DNS. You should setup forwarders within DNS to point to the
ISP.
237675 Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?id=237675
If third party DNS server:
- Must support SRV RR (RFC 2052).
- Supports dynamic update protocol (RFC 2136).
Clients should only point to the DC for DNS.
Then refresh DNS on the server:
Net Stop Dns
Net Start Dns
Net Stop Netlogon
Ipconfig /flushdns
Net Start Netlogon
Ipconfig /registerdns
Then refresh on the client:
Net Stop Netlogon
Ipconfig /flushdns
Net Start Netlogon
Ipconfig /registerdns
See if the policies are applying, if not go further......
Are there errors in the application log in regards to userenv and scecli?
Please provide the exact details within the errors if so and let us know the
polices that you are trying to push.
250842 Troubleshooting Group Policy Application Problems
http://support.microsoft.com/?id=250842
If the above does not help enable Userenv logging on the client, log in
verify you did not get the policies. Repost with that Userenv.log and the
name of the user
account you are testing with.
221833 How to Enable User Environment Debug Logging in Retail Builds of
Windows
http://support.microsoft.com/?id=221833
Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support
Get Secure! -
www.microsoft.com/security
This posting is provided "as is" with no warranties and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
