Group policy not working

[Jpln]

I have created group policy to lock a workstation after 10 minutes of inactivity. I tested this on my own account and the lockout works correctly; however, it does not work for any other user I add to the policy.

Any ideas why please?

 

[dberg35]

Did you create this in the default domain policy? For everything other than password and acct lockout you should create a separate one. Also make sure DNS is working correctly.

 

[Jpln]

I created a separate policy that sets the lockout and set a default desktop wallpaper. The wallpaper works for any user, but the lockout only works for me.

 

[dberg35]

Try running gpupdate /force on one of the pc's.

 

[Jpln]

Still can't get it to work.

I have the policy showing under our domain name, below the Default Domain policy. This is linked to the same policy file under Group Policy Objects.

The only difference between myself and the test user is security rights; I have 'Edit settings, delete, modify...' and the test user has; 'Read (from security filetering)' - could this be anything to do with it?

thanks for all your help.

 

[acl03]

Did you modify the security? Normal users need to have "Apply Group Policy" as well. This is given by default.

Try running gpresult when the settings are not being applied, it should tell you whether or not the GPO is being applied.

That might give us a clue.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[dberg35]

Also make sure the default is over writing they other policy.

 

[Jpln]

Thanks both for your help; I'll give it a go tomorrow.

Amanda