Problems applying GPO to a client

  • Thread starter Thread starter Ian
  • Start date Start date
I

Ian

Hi

Hopefully someone knows this one.

I have a WK2 server domain controller and a XP client.
In Active Directory I have created a new OU called Desktop
Restrictions, created a new group called Desktop in the
new OU (Desktop Restrictions) and placed a user in that
new group (Desktop).

I created a new GPO for the OU (Desktop Restrictions) and
edited it to get rid of the Run Command on the Start menu.

The user has a roaming Profile

When I log on the XP sytem as the user the Run command is
still there.

Any ideas will be grateful

Regards
Ian
 
You need to put the user in that OU, putting just the group in it will not work. --
Steve
 
Steve, Thanks for the reply

So placing the user in a group and putting that group in
the OU is not enough for it to work. So the user its self
has to be in the OU where the group policy is applied for
it to work?

Regards
Ian
 
Steve

I can not get users into the OU, they will not drag and
drop. the only way is to move them. I have re-installed
so I am back to the start. dcpromo has been done so now
its back to where I started

I have created new users and new OU's, but can not drag
users anywhere.

Any ideas
Ian
 
Steve, thanks for the info.

Where do you find all of these guides?

Regards
ian
-----Original Message-----
Moving them is the correct way to do it - right click,select move/select new
target container. I don't think drag and drop works for moving users in W2K
[which is fine for me]. I think it might in Windows 2003. The links below also
explain Group Policy fairly well.--- Steve

http://www.microsoft.com/technet/treeview/default.asp? url=/technet/prodtechnol/windows2000serv/howto/grpolwt.asp
http://www.microsoft.com/technet/treeview/default.asp?
Click to expand...
url=/TechNet/prodtechnol/windows2000serv/reskit/distsys/par
t4/dsgch22.asp

Steve

I can not get users into the OU, they will not drag and
drop. the only way is to move them. I have re-installed
so I am back to the start. dcpromo has been done so now
its back to where I started

I have created new users and new OU's, but can not drag
users anywhere.

Any ideas
Ian in
the
Click to expand...


.
Click to expand...
 
When I started studying for my MCSE a couple years back I did a lot of
searching on Googe and made a habit of bookmarking sites I found helpful. I
still bookmark good sites and KB articles as I come across them, many times
from reading newsgroup posts. The link below to Lab Mice is one of my
favorite and I learned a lot there. Good luck. --- Steve

http://labmice.techtarget.com/windows2000/default.htm

Ian said:
Steve, thanks for the info.

Where do you find all of these guides?

Regards
ian
-----Original Message-----
Moving them is the correct way to do it - right click,select move/select new
target container. I don't think drag and drop works for moving users in W2K
[which is fine for me]. I think it might in Windows 2003. The links below also
explain Group Policy fairly well.--- Steve

http://www.microsoft.com/technet/treeview/default.asp? url=/technet/prodtechnol/windows2000serv/howto/grpolwt.asp
http://www.microsoft.com/technet/treeview/default.asp?
Click to expand...
url=/TechNet/prodtechnol/windows2000serv/reskit/distsys/par
t4/dsgch22.asp

Steve

I can not get users into the OU, they will not drag and
drop. the only way is to move them. I have re-installed
so I am back to the start. dcpromo has been done so now
its back to where I started

I have created new users and new OU's, but can not drag
users anywhere.

Any ideas
Ian
-----Original Message-----
Yes. That will work. Another alternative could be to
apply the policy at the domain
level and then use "filtering" to apply it to only that
group with read and apply
permissions for it. By default authenticated users have
read/apply to all policies.
See the link below for more details. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-
us;322176 --- see "filter the
scope".

message
Steve, Thanks for the reply

So placing the user in a group and putting that group
in
the OU is not enough for it to work. So the user its
self
has to be in the OU where the group policy is applied
for
it to work?

Regards
Ian
-----Original Message-----
You need to put the user in that OU, putting just the
group in it will not work. --
Steve


message
Hi

Hopefully someone knows this one.

I have a WK2 server domain controller and a XP
client.
In Active Directory I have created a new OU called
Desktop
Restrictions, created a new group called Desktop in
the
new OU (Desktop Restrictions) and placed a user in
that
new group (Desktop).

I created a new GPO for the OU (Desktop
Restrictions)
and
edited it to get rid of the Run Command on the Start
menu.

The user has a roaming Profile

When I log on the XP sytem as the user the Run
command
is
still there.

Any ideas will be grateful

Regards
Ian


.



.
Click to expand...


.
Click to expand...
Click to expand...
 
Back
Top