Group policy is not working

[shivaj]

Hi

i am using 2003 server and i applied new group policy to disable control panel
and linked to OU but its not working on client

Is there any security group i need to set for this.
and i removed authenticate user from security and added domain user
but still not working

[newtech]

Have you checked whether the user accounts located in the OU where the GPO is linked to? Since the settings belongs to the user config part then it has only effect on the user accounts. You can check with gpresult /v or rsop.msc logged on as the user to check if the setting is applied. Also, the automatic GPO refresh time is between 90-120 minutes, so you have to run GPUpdate on the client to refresh the GPO asap.

[shivaj]

yes its linked to ou where i want that policy

security filtering
The setting in the gpo can only apply to the following group, user , computer

(in that i added)
administrator
domain admin
remoter desktop user

but its not working is there any thing i need to do to affect this gpo to the user

and the user is traniee member of following group


domain user
remotedesktop user

what do to next

[Jeffrey]

Have you checked with the gpresult /v or rsop.msc logged on as the user to see if the setting is applied, as asked before and have you also run gpupdate /force on the machine?

[shivaj]

Rsop result

the data is invalid. Likely causes are data is corrupt Or data has been deleted

gpupdate /force (update is completed)

[Tomthegreat]

Could you please post an ipconfig /all from the server and from a client that it is not working on? It will help us to determine your configuration if there are any mis-configuration problem that are adding to this issue?

[shivaj]

Server config



Windows IP Configuration



Host Name . . . . . . . . . . . . : Testdomain.local

Primary Dns Suffix . . . . . . . : Testdomain.local

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : Testdomain.local



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller

Physical Address. . . . . . . . . : 00-1D-09-0E-63-C7

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.0.87

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.87

DNS Servers . . . . . . . . . . . : 203.145.184.13

203.145.184.32

Client config


Windows IP Configuration



Host Name . . . . . . . . . . . . : admin

Primary Dns Suffix . . . . . . . : Testdomain.local

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : Testdomain.local



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller

Physical Address. . . . . . . . . : 00-1E-C9-2D-1B-01

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.0.99

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 203.145.184.13

I checked that the client is not listed in forward lookup zone
what can i do to add client (host name :admin) to add forward lookup zone

This event is taken from client

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 12/1/2009
Time: 4:36:24 PM
User: NT AUTHORITY\SYSTEM
Computer: ADMIN
Description:
Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

[anshusehgal]

I have noticed that why GPOs arent working including why the client machiens are not in the zone. I am not able to see how the domain controller is in the zone, since you are asking to register into the ISPs DNS server. Actually the ISPs DNS does not know where your domain controllers are, therefore how are the machines supposed to find the domain controller to retrieve GPOs and also other security and domain related info?

[shivaj]

Dear all,

I am having some problem with my group policy. I am trying to implement a policy to a group but whatever the changes I make to the policy, they don't take effect. I am using the following way. Can you please tell me where I am wrong.

1. I have created a new group and added a few users to it.
2. I right clicked the group and selected properties.
3. I clicked on the group policy tab.
4. Selected New
5. Clicked edit.
6. Then Administrative Templates under user configuration
7. Applied a few changes, like disabling Add/remove programs from the Control Panel etc.
8. Closed the opened tree and clicked ok.
9. Went to run and typed "gpupdate"
10. then logged in to another computer with the username that was in the same group, but whatever I blocked in the policy are appearing there again.

Can you please help me with that, I am using windows server 2003.

[Candace]

It is right that with the advent of Active Directory services management method of users and computers in a domain has changed mostly. There are more New tools that have been created to support this new management tools, which have also evolved even between Windows 2000 Server and Windows 2003 Server. I will recommend you to use GPMC. It is a new MMC that helps to give you a centralize management tasks and administration of group policies in a single console. Try this tool and check back.
Download GPMC