[windows2000] Re: Group policy
- From: "Shawn R. Beairsto" <sbeairst@xxxxxxx>
- To: <windows2000@xxxxxxxxxxxxx>
- Date: Wed, 30 Nov 2005 09:53:43 -0500
no, no security groups defined here... good idea though.
Running gpresult shows that the laptop policy IS being applied to the computer
settings, but not to the user settings (where the logoff script is). I'll
figure this out yet.....
thanks again
-----Original Message-----
From: George Yobst [mailto:george.yobst@xxxxxxxxx]
Sent: Tuesday, November 29, 2005 4:41 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Group policy
Trust me, I'm no AD genious either! Do you have any security groups in your
OUs?
I'm wondering if when you moved your laptop to another group that it's still in
another
security group belonging to another OU policy - just a another longshot.
On 11/29/05, Shawn R. Beairsto < sbeairst@xxxxxxx> wrote:
no such thing as a stupid question! ;)
no it's not disabled.
I'm kind of a newbie at this group policy thing, heres what I'm doing (or
wanting to do).
In Active Directory Users and Computers, I have my main domain, abc.com
<http://abc.com/> . It has a policy where I set a few things (IE home page,
proxy settings, etc). No Override and Block Policy inheritance turned off. This
all works.
I've made one OU under that called Terminal Services, and made a policy for
that container. It does things like disable control panels, folder redirection,
etc. No Override and Block Policy inheritance turned on. That all works.
Now I created another OU called laptop Users and a policy. No Override and
Block Policy inheritance turned on. I've moved my computer (for testing) into
this OU. Anything I do in this policy is NOT working, no matter how often I
secedit and gpudate things. Eventually I want a log off script to run when the
laptop users log off.
Am I doing something fundamentally wrong here? I'm not understanding why this
is not working.
Thanks for your help!
-----Original Message-----
From: George Yobst [mailto: <mailto:george.yobst@xxxxxxxxx>
george.yobst@xxxxxxxxx]
Sent: Tuesday, November 29, 2005 2:18 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Group policy
Stupid question time - Is it disabled?
I'm running out of ideas too....
On 11/29/05, Shawn R. Beairsto < sbeairst@xxxxxxx > wrote:
yup, both those option are selected on the new OU. Nothing I try seems to work.
Weird.
-----Original Message-----
From: George Yobst [mailto: <mailto:george.yobst@xxxxxxxxx>
george.yobst@xxxxxxxxx]
Sent: Tuesday, November 29, 2005 12:48 PM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Group policy
Did you check the No Overide on this one? How about Block Policy Inheritance?
On 11/29/05, Shawn R. Beairsto < sbeairst@xxxxxxx > wrote:
Thanks George. I do basically the same thing, as well as running gpupdate on
the local box. Still no joy, the policy is not being applied.
Scratching my head on this one....
-----Original Message-----
From: George Yobst [mailto: <mailto:george.yobst@xxxxxxxxx>
george.yobst@xxxxxxxxx]
Sent: Monday, November 28, 2005 6:11 PM
To: windows2000@xxxxxxxxxxxxx <mailto:windows2000@xxxxxxxxxxxxx>
Subject: [windows2000] Re: Group policy
After setting stuff in the AD, I run this little CMD file (I keep it on the
Admin's desktop):
@echo on
secedit /refreshpolicy machine_policy /enforce
secedit /refreshpolicy user_policy /enforce
pause
-George
On 11/28/05, Shawn R. Beairsto < sbeairst@xxxxxxx > wrote:
Hi all,
Having some troubles getting a GPO to take effect (Windows 2000 sp4).
Have a GPO at the domain level that is working fine. I have created a new OU
under that for our users with laptops. After moving the appropriate computers
into that group, the new policy seettings are not being applied. The domain
level GPO does not have the no override setting enabled. Other OU's (citrix ou,
etc) have their own GPO's that are working, just the new one i created is not
working. Permissions look fine. Any ideas on what I'm doing wrong? Caffeine
hasn't helped today.
Thanks,
-Shawn
--
Shawn Beairsto
Network Administrator
Data Kinetics Ltd. / Smart Telecom
http://www.dkl.com <http://www.dkl.com/>
http://www.smarttelecom.ca <http://www.smarttelecom.ca/>
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options
and info are available at:
http://www.VistaPop.com <http://www.vistapop.com/>
*****************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm <http://thethin.net/win2000list.cfm>
--
--------------------------------------------------------------------------
George Yobst, Library Technology Analyst phone: 503.723.4890
Library Information Network of Clackamas County fax: 503.794.8238
16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us
<http://www.lincc.lib.or.us/>
Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
<mailto:george.yobst@xxxxxxxxx>
"...it is impossible for anyone to begin to learn
what he thinks he already knows." - Epictetus
--
--------------------------------------------------------------------------
George Yobst, Library Technology Analyst phone: 503.723.4890
Library Information Network of Clackamas County fax: 503.794.8238
16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us
<http://www.lincc.lib.or.us/>
Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
"...it is impossible for anyone to begin to learn
what he thinks he already knows." - Epictetus
--
--------------------------------------------------------------------------
George Yobst, Library Technology Analyst phone: 503.723.4890
Library Information Network of Clackamas County fax: 503.794.8238
16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us
<http://www.lincc.lib.or.us/>
Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
"...it is impossible for anyone to begin to learn
what he thinks he already knows." - Epictetus
--
--------------------------------------------------------------------------
George Yobst, Library Technology Analyst phone: 503.723.4890
Library Information Network of Clackamas County fax: 503.794.8238
16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us
Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
"...it is impossible for anyone to begin to learn
what he thinks he already knows." - Epictetus
Other related posts:
