Group Policy Problem

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

I have a problem with my W2K workstations not processing group policy
past the "Default Domain Policy". I have set up organizational units as
follows.

ourdomain.local --> Contains the "Default Domain Policy"
Accounts
- Accounting
- Admins
- General Purpose
- Managers
- Production
- Purchasing
- Sales --> Contains "Sales Group Policy" (Let
salespersons be local admins to their W2k workstations using restricted
groups)
Builtin
Computers
Domain Controllers --> Contains "Default Domain Controllers Policy"
ForeignSecurityPrinciples
Resources
- Admin Consoles
- Exempt
- Printers
- Servers
- Workstations --> Contains the "Workstation Group
Policy" (Under Computer Configuration, set DNS server via VBS script, Use
internal Software Updates server) (Under User Configuration, disable access
to a: & b: Drives.)
Users


The problem I'm having is only the "Default Domain Policy" settings are
applied (both Computer Settings and User Settings). The "Workstation Group
Policy" processes only the "Computer settings" section of the group policy.
Why is the "User Settings" Section of the "Workstation Group Policy" not
being applied? How could I troubleshoot this issue.

Thank you in advance,

Mike...
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Group Policy will only apply to domain users and those domain users must be
within the scope of influence of the Group Policy. In other words if you
configure a Group Policy for am OU with user configuration, then the user
accounts must exist in that OU or a child OU. You can use the gpresult tool
while logged on as one of those users or a test user with the same policy
applied to see what Group Policies are being applied to the user and
computer, from which domain controller and the last time the policy was
applied. Also make sure that the user configuration portion of the Group
Policy is enabled. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321709 -- gpresult

"Know1" <Know1@nowhere.gone> wrote in message
news:OKhqcFsGFHA.3092@tk2msftngp13.phx.gbl...
>I have a problem with my W2K workstations not processing group policy
> past the "Default Domain Policy". I have set up organizational units as
> follows.
>
> ourdomain.local --> Contains the "Default Domain Policy"
> Accounts
> - Accounting
> - Admins
> - General Purpose
> - Managers
> - Production
> - Purchasing
> - Sales --> Contains "Sales Group Policy" (Let
> salespersons be local admins to their W2k workstations using restricted
> groups)
> Builtin
> Computers
> Domain Controllers --> Contains "Default Domain Controllers Policy"
> ForeignSecurityPrinciples
> Resources
> - Admin Consoles
> - Exempt
> - Printers
> - Servers
> - Workstations --> Contains the "Workstation Group
> Policy" (Under Computer Configuration, set DNS server via VBS script, Use
> internal Software Updates server) (Under User Configuration, disable
> access
> to a: & b: Drives.)
> Users
>
>
> The problem I'm having is only the "Default Domain Policy" settings are
> applied (both Computer Settings and User Settings). The "Workstation Group
> Policy" processes only the "Computer settings" section of the group
> policy.
> Why is the "User Settings" Section of the "Workstation Group Policy" not
> being applied? How could I troubleshoot this issue.
>
> Thank you in advance,
>
> Mike...
>
>
>
>
>