XP not applying GP, but 2000pro is????

[Solemn]

Hi!
I'm running a test lab with a Win 2000 Server, a Windows 2000 Pro client and a Windows XP client.

My Win2000 client is applying Group Policy perfectly, but my XP client isn't doing so at all!!! Could anyone give me a hint what's the problem!?!

I get the following errors/warnings in the log of the XP client:

Type Source Event
------------------------------------------------
Error Userenv 1030
Error Userenv 1101
Warning Userenv 1517

The XP Client's DNS address is pointing to my server.

The closest advice I found was on MS knowledge base article 314494, where the cause was that DFS (Distributed file system) client is turned off. So, I opened my registry to edit the DisableDFS -key just to find out that there isn't one!!!
Should I create one????

Please help!!!

 

[ACraib]

Hi Solemn

Did you ever find a solution to this?

 

[bcastner]

DNS needs to point to the DNS server, not the file server.

 

[bcastner]

90% of the cases of GP not applying when it should devolve to DNS issues. See faq779-4017

 

[ACraib]

somethin very strange has just happened. The computer account (my software get installed to the computer not user) was in an OU two levels deep from the OU where the GPO is applied.

I've just moved the computer account to the top level OU and the GPO has applied. Very strange.

 

[bcastner]

That would certainly explain the issue.

 

[ACraib]

how?

The none of the child OU's have Block Inheritence and the W2K clients in the child OU's pick the policy correcty .... it's all very very strange .... still without computers I'd be without a job !!

 

[bcastner]

Applying group policy to an ou which contained group(s) only won't work, and this is by design. You have to make sure that all computer objects where you want to have this policy applied fall under it's scope in ad hierarchy.

 

[Solemn]

I found the problem in my case. I had accidentally denied users the right to access the active directory. I had done this after making the win2000-machine a domain member, this seems to be the reason why it did apply the GP and XP-machine didn't.

Beginner mistake.

I have also noticed that in GP inherition doesn't work in my server. If a put a group policy (GP) into an OU, the GP gets applied in that OU only, not in the OUs below it. Turning policy inharition on or off did not make a difference, though it should have, right???
I worked around this by putting a group policy to all OUs, no matter what level they were.

 

[ACraib]

thanks for that .... looks like the same problems at my end.