Newbie to AD requires help on Group Policy

[SteveAudus]

I have just started trying to lock up our XP machines, before our students use them. In a similar way that we do to our NT machines using Policy Editor.

Using AD I have created a test user and a test OU group,
I have put the user in the test OU group. I have created a Group Policy, and started with something simple,

Enabling and diasbling, Start Menu setting in Administrative Templates under User Configuration.

But when I log the XP machine on as the test user,
the policy has no effect. It just looks like a unconfigure new user, open for the user to play with.

When I get a Policy that works, I will be appliying it
to all our user OU groups.

Any Suggestions?

Thansk for your Help,
Steve Audus
Chaucer School
Sheffield, UK

http://www.chaucer.sheffield.sch.uk

http://www.educationinternet.co.uk

 

[adejordan]

Steve

The ususl reason for a group policy not being applied is that the group to which it is being applied does not have both read and apply permissions to the group policy object. Try this and get back if there are any issues.

Adrian Jordan
MCSE,CCEA,CCNA

 

[SteveAudus]

I have checked the Security for this policy and it's set for Auth. Users to read and apply.

I have now tried adding read and apply for xptest user.

It still does not have any effect on the XP user?

Please help?

Steve Audus

http://www.chaucer.sheffield.sch.uk

http://www.educationinternet.co.uk

 

[adejordan]

Is the test OU group actually in the Test OU? Adrian Jordan
MCSE,CCEA,CCNA

 

[fuunstatic]

some other things you could try is to check your DNS is OK

Also it is possible your GP is fine and the pc has a problem

eg I have 2 identically built pcs in different parts of the building and the GP works on one pc only because the other is "too far away"

GPs are bandwidth dependent and will not work if there is little bandwidth, check out microsoft support site etc ....

also download GPResult.exe, this will tell you what GP were downloaded to your pc and what DC was in use

 

[koquito]

If all the permissionas are set right, usually is a DNS problem.
1)Make sure those workstations are pointing to your DC DNS address.
2)MAke sure, the policy is being configured in the USer section, not on the computer section.(If your intention is to apply the policy only to the user).
3)you can also download gpresult.xex form microsoft and run it that workstation to see what policies are aplpying to hat computer/user.
check this post also
thread96-414801
A+, MCP, CCNA
marbinpr@hotmail.com

"I just know that I know nothing"
Socrates (469-399 B.C.E.)