Applying group policy to computers

[alura]

Hi,

I have my group policy set up (for both computer and user configurations)... The user policy is being applied fine. However, the computer configuration does not. I added the group "domain computers" to the group policy security tab, and have given it read and apply group policy permissions.

Now, when I run the group policy results on any computer on the domain it says that it does not apply the default domain policy. It says "Access Denied (Security Filtering)"

So I guess somewhere there is a permission that is not letting the group policy to be applied to my domain computers. Does anyone know where this would be?

Thanks in advance.

 

[baronne]

The Domain Computers group must have read, and apply permissions.

 

[alura]

Well, I got it working... I had administrator in the permissions list set with deny, so all the computers did not ahve access to the policy.

But now I think I have really messed up AD. I have somehow locked myself out of group policy, and I cannot edit it. I restarded the server and now "default domain policy" doesn't even show up. I have tried restoring permissions on the default domain group policy (knowledge base #324800) without success. So, I thought big deal I'll just make another group policy... well any new group policies I make don't work and dont show up. No one is using the servers yet, but I have to switch people over to them this weekend -- do I have to format and reinstall windows/AD ?