Problem with XP and Group Policy

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,
One of my xp client is not downloading the full group policy from my windows
2003 DC. All the other settings work eg properties from the MY COMPUTER icon.
Except I created a policy so that the user is not able to set a desktop
wallpaper or change the time but that doesn't work on this pc. It works on
the others. Any reason.

Thanks
 
Is this computer and users in the same container as the other users and containers?
User rights such as changing system is computer configuration and the other is user
configuration which means that both the user and computer must be under the "scope of
influence" of the GPO. On an XP Pro computer, the user may have to logoff/logon a
couple of times for user configuration to take effect. Dns misconfiguration is often
a cause of policy not applying in that domain computers must point only to domain
controllers running dns that contain the AD domain. I would run netdiag on that
computer looking for any pertinent failed tests such as dns, dc discovery, kerberos,
or secure channel. Gpresult and the mmc snapin for RSOP can help troubleshoot Group
Policy problems also. Gpresult will display user and computer location in Active
Directory, and what policies are applied to user and computer with last time
pplied. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321708 -- netdiag and how to
install support tools.
 
Make sure that computer can ping the domain controller by IP address and fully
qualified domain name. Run Ipconfig /all on it and make sure that is using the same
dns server as the other computers that are receiving the policy, which must be a
domain controller and make sure that it is in the same container as the other
computers in Active Directory Users and Computers. Also check Event Viewer for any
possible error messages that may help in the system and application logs. Review the
link below on Active Directory dns. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;291382
 
Hi,
I still get the same problem after trying everything. I even removed the pc
object from AD and removed the PC from the domain. I then rejoined the domain
and get the same problem. Is there a way to delete the GPO from the xp client
and then have it download a fresh copy from the PDC.

Thanks

Steven L Umbach said:
Netdiag will work on XP Pro. I use it all the time. You need to use the version from
the support tools from the XP Pro disk [or download the support tools below] and you
need to execute from the folder where it is installed. --- Steve

http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en

Chris said:
Hi,
Also netdiag.exe does not work on xp client.
Click to expand...
Click to expand...
 
Does netdiag complete without any errors or failed tests?

Another thing you could try is the RSOP mmc snapin in the Windows XP Pro computer.
You can run it and select current computer and user. When it is done you can select
either computer or user configuration and select properties. That will show the GPO's
applied for each. You can also select the options in the lower left hand corner such
as display scope on management for more info and look in the errors page. Then you
can view the various settings applied to the user or computer and select the
properties of the settings and select precedence to see what GPO's are applying that
setting. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;323276 -- works either on XP
Pro or 2003 Server.

Chris said:
Hi,
I still get the same problem after trying everything. I even removed the pc
object from AD and removed the PC from the domain. I then rejoined the domain
and get the same problem. Is there a way to delete the GPO from the xp client
and then have it download a fresh copy from the PDC.

Thanks

Steven L Umbach said:
Netdiag will work on XP Pro. I use it all the time. You need to use the version
from
the support tools from the XP Pro disk [or download the support tools below] and
you
need to execute from the folder where it is installed. --- Steve

http://www.microsoft.com/downloads/...76-9BB9-4126-9761-BA8011FABF38&displaylang=en

Chris said:
Hi,
Also netdiag.exe does not work on xp client.

:

Is this computer and users in the same container as the other users and
containers?
User rights such as changing system is computer configuration and the other is
user
configuration which means that both the user and computer must be under the
"scope
of
influence" of the GPO. On an XP Pro computer, the user may have to logoff/logon
a
couple of times for user configuration to take effect. Dns misconfiguration is
often
a cause of policy not applying in that domain computers must point only to
domain
controllers running dns that contain the AD domain. I would run netdiag on that
computer looking for any pertinent failed tests such as dns, dc discovery,
kerberos,
or secure channel. Gpresult and the mmc snapin for RSOP can help troubleshoot
Group
Policy problems also. Gpresult will display user and computer location in
Active
Directory, and what policies are applied to user and computer with last time
pplied. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321708 -- netdiag and
how
to
install support tools.

Hi,
One of my xp client is not downloading the full group policy from my windows
2003 DC. All the other settings work eg properties from the MY COMPUTER icon.
Except I created a policy so that the user is not able to set a desktop
wallpaper or change the time but that doesn't work on this pc. It works on
the others. Any reason.

Thanks
Click to expand...
Click to expand...
Click to expand...
 
Back
Top