Ok. One thing I see in the userenv log is a lot of inconsistency in GPOs between AD & SYSVOL. Version number mismatches and inability to read the sysvol portion of a GPO. I am guessing that whatever DCs your user's are hitting are not replicating correctly. How many DCs do you have? I would run gpotool.exe (from SUpport Tools ) against your domain's GPOs and see what errors show up. Darren _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 12:50 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: GP not applied Okay, here are userenv.log and gpedit.log. I'm looking at them as well, but please let me know what you see. As I've said before, I'm new to all this GPO stuff. I was really happy when it was working over here, I'd just like to know why it's not working now that I've moved the server. On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: You might try enabling verbose userenv logging on one of those problem users, and then post the results here. _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 12:17 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: GP not applied I had other test users (1-5) and they worked in the lab and are not now. Here's a strange one, if I log in as someone who is just a domain admin, the GPOs apply correctly. If I log in as a newly created user, nothing works. If I make that user a domain admin, nothing works. On 8/24/06, Darren Mar-Elia <darren@xxxxxxxxxx> wrote: So, are you saying that you had a DC on an isolated subnet and now its on your production network, and a client on that network that is part of that DC's domain is not getting user policy as expected? If so, then make sure that the GPOs you're trying to deliver are linked in such a way that the user test6 will process them. The fact that a domain admin account gets the policies tells me that the policies may not be linked to a place in your AD tree that test6 will get them. Darren _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto: <mailto:gptalk-bounce@xxxxxxxxxxxxx> gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Gray Troutman Sent: Thursday, August 24, 2006 11:41 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] GP not applied Hey folks, Well, I just moved the DC from the lab to the network and it no longer applies the GPOs. I can join the domain and log in with no problem, but the policies are not applied. If I run gpresult, I get "INFO: The user "CMHWM\test6" does not have RSOP data." Two things: One, I changed the domain server name. Two, I get the policies if I log in as a domain admin, but not as a user. Any ideas what I screwed up here? Thanks, Gray