GPO is not applied to a user.

[jabw]

Applied a GPO to an OU with users.
Logged on to a machine and user 1 gets the GPO settings (just changed the IE title). No problem.
Created an other user and also logged on to the same machine. GPO wasn't applied.????

Any suggestions? could it perhaps be that some settings are stored in cache somewher?

 

[basst]

Use the RSOP in logging mode whilst the actual user is logged on at the affected PC or from another PC in planning mode and focus on the compter in question and the user account in question.

This will show you the effective GPO settings for the user in question.

You can also run gpresult.exe at the cmd prompt after logging on as the user. This will show you what GPO's are being applied.

I suspect that the user in question does not have the permission to read / apply GPO.

A user must have both these permissions to the GPO or it will not be applied to them.

NOTE: RSOP can be added in from a mmc console.

 

[jabw]

Think you could be right about:

"A user must have both these permissions to the GPO or it will not be applied to them."

But how to check this? I've searched in the books I have but couldn't find a howto answer.
So, any practical suggestions?

 

[jabw]

Found the setting.
Authenticated Users group has Read and "Apply Group Policy"...
So, that's not where the problem is.

Again, I've created a couple of users in a OU with Folder Redirect and some minor changes to IE like an other Title.
But, if I logon to a machine using those accounts only one of them get's the (GPO) settings and other (AD domain) users don't get the GPO applied to them...

 

[jabw]

Found something???
If I create a new user and login with a machine with a direct (cable) connection to the LAN than it works.
Folder redirection is applied and IE's title is changed.
But if I login on a machine that's wireless connected to the LAN than Folder redirection is applied (just checked where the mydocuments folder is going to) BUT IE's title is NOT changed, nor is the default homepage.

Looks that it's something related to the wireless part of the LAN??

Any suggestions.

 

[basst]

If Windows 2003 detects a slow link i.e. connection speed is 500K or less then GPO will not apply.

You will need to change the slow link detection policy and set the speed to meet your requirements.

 

[jabw]

Thanks,

I've given it a try but without any result.
I've set to speed to 0.
Also did a test with two machines a windows 2000 and a windows XP(sp2) machine. Both clean installed and connected with a (cat5) cable to the LAN.
Result is that the user on windows 2000 get both the folder redirect and the IE settings. But that same user on XP does get the folder redirect but NOT the IE settings? So if I bypass the wireless part than the problem remains.

Done a GPUPDATE on the XP machine without any results. (it says that machine and user parts are both applied).

Also done a RSoP with the user on the XP machine (firewall disabled) and acourding to 'group policy results' the GPO in question is applied.
RSoP is not possible (as far as I know) on windows 2000.

Any suggestions?

 

[jabw]

Problem solved.... Well not realy but I removed XP and installed Win 2000. Now it works.
Still don't know why XP won't accept the IE settings?