Restricted Groups Not Applied on XP Machines

[rushrick]

I followed MS Article

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q320065

on my 2K clients and it works great.

However, on the XP ones it is not applied. Anyone have the same problem?

I applied the XP templates to the GPO and made sure the GPO was configured properly. No other GPO's are affecting this one. The 2k works the XP doesn't.

Is there an alternate way of doing this?

Thanks,

Rick

 

[markdmac]

Follow the instructions from that MSKB article, but for the last step try this:

GPUPDATE /ENFORCE

This command replaced the secedit command.

 

[rushrick]

Is the GPUPDATE /ENFORCE executable from a 2000 DC or do I need to / can I excute on a 2003 member server?

According to this article

http://www.microsoft.com/technet/tr...l/winxppro/proddocs/sag_SCErestrictgroups.asp

if left alone the policy will refresh automatically after 16 hours, regardless of changes, which it has.

Thanks,

Rick

 

[markdmac]

You would want to execute that on the local workstation, which you could fire off via a script.

The policy should automatically replicate on either the 16hours mark, OR when the workstation reboots.