local security policy

  • Thread starter Thread starter Duane Smith
  • Start date Start date
D

Duane Smith

Hi all,
this may seem like a trivial question, but I'm at a loss. I'm trying
to figure out if it's possible to set a local security policy on all
computers in a domain from Active Directory? To test it out, I'm just
entering a text in the "display text when user tries to login", when I
set it, it does appear on the local windows 2K server when I try to
login, but none of the computers in the domain? I've waited about 20
minutes and even longer and nothing. I've logged out of those
computers, even rebooted them. Is this possible, or am I barking up
the wrong tree.

Thanks in advance
John
 
Just off the top of my head, have you tired:

secedit /refreshpolicy machine_policy /enforce

workstation get GPO updates every 90 minutes unless you do it manually.
 
Also, make sure you did not set that policy in the domain controller
security policy. This will only affect servers in the domain controller OU.
You have to set this policy in a new GPO under the OU that the computers in
question belong to.

Hope this helps
 
Back
Top