Group Policy 2

[RidgedRaider]

Hi All
I am trying to enforce group policies from my 2003 srv to xp clients. The policies are not working, i have tried a few of the normal policies such as remove help from the start menu on the client but they do not take effect. I have a domain controller with active directory installed and have created a few OU's for user accounts (very simple stuff), the client machines are jointed to the domain. I have installed the group policy manager and created a policy for one of the OU's and targeted the policy accordingly. I have not changed the group policy and it is the default one for the domain.
Can anyone help me out with this as Im going balder by the hour.

Thx 4 any help

 

[porkchopexpress]

Are you applying the policy to an OU that holds user accounts rather than computer accounts?

 

[58sniper]

As porckchopexpress mentions, you need to apply the right part of the policy to the right type of objects. GPOs have two parts - user config and computer config. The user config targets user accounts in the OUs that are linked to the policy, and computer config targets those machines in the OUs.

GPOs have no effect on groups in those OUs.

You can use the modelling wizard in the GPMC to target a machine and see if there are any problems applying the policy.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[RidgedRaider]

Hi
I am using user config policy to targets user accounts in the OUs and not machines or groups.
Am i missing something simple somewhere?

 

[58sniper]

If you run gpresult on one of the machines, does the policy show up in either the "applied" or "not applied" sections under "USER SETTINGS"?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[RidgedRaider]

Hi Pat

i have run gpresult and the only info that comes back is;
Z:\>gprsult
INFO: The policy object does not exist.

The user account has a home folder on the server that is Z:

Karl

 

[RidgedRaider]

I have logged on to the local machine with a user account that does not have a home folder on the server and the info that comes back is;
C:\>Documents and Settings\admin1.GRANGEF>gpresult
INFO: The user "GRANGEF\admin1" does not have RSOP data.

Karl

 

[porkchopexpress]

Does this happen with other accounts or just this one?

Do you see any errors in the event log during logon?

 

[RidgedRaider]

It happens with all of the accounts inside the OU with the policy and I have a couple of accounts outside the OU and the all produce the same result.

The event log shows that "windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted.) Group policy processing aborted."

I dont know if its any help but I have dont a ping from the client to the server name and I get a reply but i did a pint to the domain and that "could not be found".
Thx

 

[58sniper]

What's in the event logs?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[RidgedRaider]

This is the text from the event log on the client machine:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 23/06/2007
Time: 19:21:31
User: NT AUTHORITY\SYSTEM
Computer: ICT35
Description:
Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.

 

[58sniper]

Take a look at

http://eventid.net/display.asp?eventid=1053&eventno=1584&source=Userenv&phase=1

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP

 

[RidgedRaider]

thx for that, its a great site and it help me get the problem sorted. thx again

 

[porkchopexpress]

If you found a solution can you post what it was.