gpo gpmc

[2k1yzfr6]

Ok i have been trying to apply group policies to an OU.
I use the gpmc console and I make a new group policy and then I link it to my OU. The policy never takes affect on the pc when the user logs in. Is there something else i got to do? I am new to this and it is my first time trying to do group policies by OU. and if it helps i am using windows 2003 as my DC. thanks for any help.

 

[2k1yzfr6]

here is a snap shot of my gpmc

http://i21.photobucket.com/albums/b279/2k1yzfr6/gpo.jpg

 

[kmcferrin]

The picture is so small that I can't make anything out, and zooming in just makes it blurry. General things to look for are:

1. Is the policy defined on the User Configuration or the Computer Configuration side of group policy? If it is a user policy then it must be linked to the OU where those user objects reside. If it is a computer policy then it must be linked to the OU where those computer objects reside. Also, user policies cannot be applied to computers, and vice versa.

2. On the security tab of the group policy object itself, is there a checkbox under Apply Policy for the group Authenticated Users? If not, is there an entry for the appropriate group that has the Apply Policy box checked?

3. Some policies can only be implemented in the Default Domain Policy. The most commonly used one is the setting for password length, complexity, and change interval. If you wish to change any of these settings then you must change them in the Default Domain Policy, and they will apply to all users in the domain.

 

[2k1yzfr6]

option 2 you gave me i can not seem to locate. how do i get to the security tab of the policy?

 

[kmcferrin]

Sorry, if you are using GPMC then it will be on the Scope tab under Security Filtering. If you are using AD Users and Computers from the Win2K server, then it will be on the Security tab.

 

[2k1yzfr6]

Ok I have linked a gpo. Now all my settings work except the Internet Explorer Maintenance settings. Why would the policy block these settings?

 

[kmcferrin]

They shouldn't. Is there more than one policy that sets IE Maintenance settings that applies to the user? Try using the Group Policy Results wizard to see if that policy should be applied to that user on that workstation.

 

[2k1yzfr6]

i think i got it. Win xp sp2 enables folder redirection. IE favorites will not copy when folder redierction is enabled. I need to run a reg key to disable it. It worked on my test pc soon i did the reg edit. now to find a way to import a reg key to remote pc's. anyone know of a simple way?

 

[kmcferrin]

All group policies do is manipulate reg keys remotely to enable certain settings. You could build a policy template to change the setting that you require, assuming that it doesn't already exist.