Group Policy not being applied

[mac18]

I have a single DC. I have set up three OU's with a GPO applied to each. When I(Administrator)logon to a system I have no GPO's applied(designed it that way), but when I log on with test user acccount the GPO is not applied. I log out and log back in with test account and GPO IS applied. GPO restrictions are done with the USER side of the GPO not Machine. Any ideas or directions? All help will be appreciated.

 

[BWilson77080]

what types of restrictions (password, IPSec, etc.)?
some components in the user section requrie that components in the computer section be enabled also.

 

[MattWray]

Have you tried refreshing the policy first. When you create the policy as Admin, from command line run SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE. Then log on as the Test User and see if the policy is enforced. This is supposed to be for local policies, but worth a try.
Also, have you checked your Event Log? Policy issues should show up with errors or warnings....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[BWilson77080]

that command with machine_policy at the end is only for computer configs in a GPO, and any GPO not just local. user_policy is the switch he would want if that were the case

 

[MattWray]

From MS:
Secedit Parameters
machine_policy
Refreshes security settings for the local computer.
user_policy
Refreshes security settings for the local user account currently logged on to the computer.
This can be found by typing secedit /? from the CMD line...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[Roblu]

A good way to see applied and non-applied GPO:s in your entire network is to use Special Operations Suite,

http://www.specialoperationssuite.com.

/Roblu