Windows 2k: Group policy applied in the server but not the workstation

[sentubong]

hi all

i am trying to implement a group pollicy for win 2k. the problem is the policy only applied when i login using the server but not when i login to a workstation with the win2k prof as the client.

hope to get help on this.

thank you

sentubong

 

[MarcS1]

Have you assinged read and apply policy permisions to the group policy object for the users you are trying to control and also have you assigned the gpo to the site or domian or ou that these users belong to

 

[sentubong]

hi marcS1

yes, we have checked that. i just can't see the logic that the policy work well if i login using the server itself but not when i login into a workstation. it seems as the workstation do not talk to the server.

beside than the rights, is there any additional info i need to check at the workstation site.

thanks.

sentubong

 

[aduplicate]

Try
secedit /refreshpolicy machine_policy /enforce
and
secedit /refreshpolicy user_policy /enforce
in a dos shell. Then check yr event viewer. I had gp problems, one way to check if its working is to put a title in ie and check on the w/s.

 

[sentubong]

hi aduplicate

yes i've tried the
secedit /refreshpolicy machine_policy /enforce
and secedit /refreshpolicy user_policy /enforce

and had checked the event viewer. it is running but still can see the policy working the way we want it to be. : (

we still checking and trying.

thanks for your help.

cheers

sentubong

 

[aduplicate]

sentubong,

have u checked the users yr loggin on with is in the group that has been applied the gp?

Also make sure the gp is set to no overside and its no disabled. Check this in the group policy properies where u create a new one etc....

Are the desktop pcs win2k aswell?

 

[welshguy]

If you have checked the above suggestions and the policy should definately be applied to the user/computer involved.
I would run Gpresult (win 2000 professional resource kit)
check to see if policy is being applied.

If it is not then I would say it would be DNS settings
on the professional client - check the machine is pointing at a valid DNS server in the domain - either via DHCP scope options or statically assigned.

Hope this helps - usually Group policies not being applied very often down to DNS

Hope this helps in your investigation.

Cheers

 

[aduplicate]

yeah thats how i fixed mine, sorry I forgot to mention that one aswell. If your not using DHCP just enter the ip and servername in your hosts file in root\system32\drivers\ect\hosts, remember to hit enter after you have entered it in.

 

[sentubong]

hi all

thank you very much for all the help. we had tried all your suggestions. and it seems like the problem liase within the DNS. one of us has put in an external ip to the the dns server and that caused us problem.

now..everything works fine. until something come up again. : )

thanks again.

cheers

sentubong