no such thing as a stupid question! ;) no it's not disabled. I'm kind of a newbie at this group policy thing, heres what I'm doing (or wanting to do). In Active Directory Users and Computers, I have my main domain, abc.com. It has a policy where I set a few things (IE home page, proxy settings, etc). No Override and Block Policy inheritance turned off. This all works. I've made one OU under that called Terminal Services, and made a policy for that container. It does things like disable control panels, folder redirection, etc. No Override and Block Policy inheritance turned on. That all works. Now I created another OU called laptop Users and a policy. No Override and Block Policy inheritance turned on. I've moved my computer (for testing) into this OU. Anything I do in this policy is NOT working, no matter how often I secedit and gpudate things. Eventually I want a log off script to run when the laptop users log off. Am I doing something fundamentally wrong here? I'm not understanding why this is not working. Thanks for your help! -----Original Message----- From: George Yobst [mailto:george.yobst@xxxxxxxxx] Sent: Tuesday, November 29, 2005 2:18 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Group policy Stupid question time - Is it disabled? I'm running out of ideas too.... On 11/29/05, Shawn R. Beairsto < sbeairst@xxxxxxx> wrote: yup, both those option are selected on the new OU. Nothing I try seems to work. Weird. -----Original Message----- From: George Yobst [mailto: <mailto:george.yobst@xxxxxxxxx> george.yobst@xxxxxxxxx] Sent: Tuesday, November 29, 2005 12:48 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Group policy Did you check the No Overide on this one? How about Block Policy Inheritance? On 11/29/05, Shawn R. Beairsto < sbeairst@xxxxxxx > wrote: Thanks George. I do basically the same thing, as well as running gpupdate on the local box. Still no joy, the policy is not being applied. Scratching my head on this one.... -----Original Message----- From: George Yobst [mailto: <mailto:george.yobst@xxxxxxxxx> george.yobst@xxxxxxxxx] Sent: Monday, November 28, 2005 6:11 PM To: windows2000@xxxxxxxxxxxxx <mailto:windows2000@xxxxxxxxxxxxx> Subject: [windows2000] Re: Group policy After setting stuff in the AD, I run this little CMD file (I keep it on the Admin's desktop): @echo on secedit /refreshpolicy machine_policy /enforce secedit /refreshpolicy user_policy /enforce pause -George On 11/28/05, Shawn R. Beairsto < sbeairst@xxxxxxx > wrote: Hi all, Having some troubles getting a GPO to take effect (Windows 2000 sp4). Have a GPO at the domain level that is working fine. I have created a new OU under that for our users with laptops. After moving the appropriate computers into that group, the new policy seettings are not being applied. The domain level GPO does not have the no override setting enabled. Other OU's (citrix ou, etc) have their own GPO's that are working, just the new one i created is not working. Permissions look fine. Any ideas on what I'm doing wrong? Caffeine hasn't helped today. Thanks, -Shawn -- Shawn Beairsto Network Administrator Data Kinetics Ltd. / Smart Telecom http://www.dkl.com <http://www.dkl.com/> http://www.smarttelecom.ca <http://www.smarttelecom.ca/> ***************************** New Site from The Kenzig Group! Windows Vista Links, list options and info are available at: http://www.VistaPop.com <http://www.vistapop.com/> ***************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm <http://thethin.net/win2000list.cfm> -- -------------------------------------------------------------------------- George Yobst, Library Technology Analyst phone: 503.723.4890 Library Information Network of Clackamas County fax: 503.794.8238 16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us <http://www.lincc.lib.or.us/> Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx <mailto:george.yobst@xxxxxxxxx> "...it is impossible for anyone to begin to learn what he thinks he already knows." - Epictetus -- -------------------------------------------------------------------------- George Yobst, Library Technology Analyst phone: 503.723.4890 Library Information Network of Clackamas County fax: 503.794.8238 16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us <http://www.lincc.lib.or.us/> Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx "...it is impossible for anyone to begin to learn what he thinks he already knows." - Epictetus -- -------------------------------------------------------------------------- George Yobst, Library Technology Analyst phone: 503.723.4890 Library Information Network of Clackamas County fax: 503.794.8238 16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx "...it is impossible for anyone to begin to learn what he thinks he already knows." - Epictetus