Group Policy Object (newbie)

[TimHansen]

I have posted this already but it would not come up on my thread section of this website. Still new to this.

Anyway I'm Having trouble getting my group policies to apply. I have downloaded GPMC and have linked a gpo to an OU. Then I have security filtered the gpo to a group. I have also gone into deligation and it is set to read and apply group policy. But still nothing is working. Whenever I log into the client computer, I get no changes. The only changes that were made was the password policy that i changed in the default group policy settings. But the changes I make to the client users policy that I made don't seem to apply.

Could this be a DNS error.
I have attached my dns log file.

 

[schtek]

on the client in dos type: gpresult

see if the client is in the right group/ou
check the user settings

if its taking a very long time to log on it could be as you say DNS error (i have not looked at your log yet)!


"Practice makes Perfect"
("la pratique rend parfait")
CPO rt'd RN

http://twitter.com/schtek

 

[TimHansen]

I ran the gpresult you said and this is what it gave me.
INFO: The policy object does not exist.
I'm guessing this isn't good. The client is in the right OU.

 

[schtek]

here is a good link hope it helps good instructional video on left...


"Practice makes Perfect"
("la pratique rend parfait")
CPO rt'd RN

http://twitter.com/schtek

 

[acl03]

Is there a reason why you are using security filtering? Normally, unless there are special circumstances, you just create and link a GPO to an OU, and it applies to everything in it.

You shouldn't make it a practice to limit the scope of a GPO via security groups, there are specific times where that is usually done.

Normally, I simply use your OU structure to designate who gets which policies.

It tends to get confusing when using security filtering all over the place.

Thanks,
Andrew

Hard work often pays off over time, but procrastination pays off right now!

 

[TimHansen]

I tried not setting secuirty filtering like acl03 said but that didn't make any difference. Still nothing happens. And I also did not see any link to a video that schtek said he had posted. Not sure if it would matter because I've probably seen ever video and article there is to set this up and have set it up as such with no change. Still wondering if this is a dns error. Thanks for all the help.

 

[sirlojik]

try gpupdate /force after linking to ou/group/site

 

[TimHansen]

That doesn't work either.

 

[TimHansen]

Maybe I should just reinstall windows server. I have done everything I am supposed to do and my Group policy settings should work but their not. Just another wounderful microsoft experiance.

 

[pagy]

Could well be a dns problem looking at your log. Run netdiag on your DC and post any errors that are reported.

Also how many DCs do you have?

Paul
MCSE 2003
MCSA 2003
MCITP Enterprise Administrator

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[TimHansen]

I think I found the Problem. Only thing is I don't know how to fix it. Please look at attached picture.

Note: In my attempts to solve the problem I reinstalled The DNS role for my server which caused the dns name to change from hansenhome.ser to hansenhome.srv. Just thought I'd let you know for those who have seen the DNS log.

 

[pagy]

Ok, how many DCs do you have and what IP addresses are the DCs pointing to as their DNS servers?

you could also use nltest /dsregdns to refresh the domain controllers DNS records but before doing please answer the above. I don't like the fact that part of the error is that it can't find DNS records on server 0.0.0.0

Would be helpful if you could also post your IP configuraton on the domain controllers

Paul
MCSE 2003
MCSA 2003
MCITP Enterprise Administrator

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[TimHansen]

I have only 1 DC.
Ip address: 192.168.1.133
Subnet Mask: 255.255.255.0
Default gateway: 192.168.1.1
Preferred DNS server: 127.0.0.1
Alternate DNS server: Blank

I Hope this information is what you needed. Thanks for all the help.

 

[schtek]

change the prefered DNS to 192.168.1.133 ensure DHCP reflect these changes to DNS server,, sign on with client and do a gpresult in DOS


"Practice makes Perfect"
("la pratique rend parfait")
CPO rt'd RN

 

[Zelandakh]

after you change the DNS, restart just to make sure everything takes effect.

 

[pagy]

Make the change as suggested to the preferred dns server setting, then run netdiag and dcdiag again on the DC and see if you get any errors

Paul
MCSE 2003
MCSA 2003
MCITP Enterprise Administrator

If there are no stupid questions, then what kind of questions do stupid people ask? Do they get smart just in time to ask questions?
Scott Adams

 

[TimHansen]

When I ran netdiag I got the same error message as before. Sorry anymore suggestions.