[windows2000] Re: Group policy
- From: George Yobst <george.yobst@xxxxxxxxx>
- To: windows2000@xxxxxxxxxxxxx
- Date: Tue, 29 Nov 2005 13:40:32 -0800
Trust me, I'm no AD genious either! Do you have any security groups in your
OUs?
I'm wondering if when you moved your laptop to another group that it's still
in another
security group belonging to another OU policy - just a another longshot.
On 11/29/05, Shawn R. Beairsto <sbeairst@xxxxxxx> wrote:
>
> no such thing as a stupid question! ;)
> no it's not disabled.
>
> I'm kind of a newbie at this group policy thing, heres what I'm doing (or
> wanting to do).
> In Active Directory Users and Computers, I have my main domain, abc.com.
> It has a policy where I set a few things (IE home page, proxy settings,
> etc). No Override and Block Policy inheritance turned off. This all works.
> I've made one OU under that called Terminal Services, and made a policy
> for that container. It does things like disable control panels, folder
> redirection, etc. No Override and Block Policy inheritance turned on. That
> all works.
> Now I created another OU called laptop Users and a policy. No Override and
> Block Policy inheritance turned on. I've moved my computer (for testing)
> into this OU. Anything I do in this policy is NOT working, no matter how
> often I secedit and gpudate things. Eventually I want a log off script to
> run when the laptop users log off.
>
> Am I doing something fundamentally wrong here? I'm not understanding why
> this is not working.
>
> Thanks for your help!
>
> -----Original Message-----
> *From:* George Yobst [mailto:george.yobst@xxxxxxxxx]
> *Sent:* Tuesday, November 29, 2005 2:18 PM
> *To:* windows2000@xxxxxxxxxxxxx
> *Subject:* [windows2000] Re: Group policy
>
> Stupid question time - Is it disabled?
> I'm running out of ideas too....
>
>
> On 11/29/05, Shawn R. Beairsto <sbeairst@xxxxxxx> wrote:
> >
> > yup, both those option are selected on the new OU. Nothing I try seems
> > to work. Weird.
> >
> > -----Original Message-----
> > *From:* George Yobst [mailto: george.yobst@xxxxxxxxx]
> > *Sent:* Tuesday, November 29, 2005 12:48 PM
> > *To:* windows2000@xxxxxxxxxxxxx
> > *Subject:* [windows2000] Re: Group policy
> >
> > Did you check the No Overide on this one? How about Block Policy
> > Inheritance?
> >
> > On 11/29/05, Shawn R. Beairsto <sbeairst@xxxxxxx > wrote:
> > >
> > > Thanks George. I do basically the same thing, as well as running
> > > gpupdate on the local box. Still no joy, the policy is not being applied.
> > > Scratching my head on this one....
> > >
> > > -----Original Message-----
> > > *From:* George Yobst [mailto: george.yobst@xxxxxxxxx]
> > > *Sent:* Monday, November 28, 2005 6:11 PM
> > > *To:* windows2000@xxxxxxxxxxxxx
> > > *Subject:* [windows2000] Re: Group policy
> > >
> > > After setting stuff in the AD, I run this little CMD file (I keep it
> > > on the Admin's desktop):
> > >
> > > @echo on
> > > secedit /refreshpolicy machine_policy /enforce
> > > secedit /refreshpolicy user_policy /enforce
> > > pause
> > >
> > > -George
> > >
> > > On 11/28/05, Shawn R. Beairsto <sbeairst@xxxxxxx > wrote:
> > > >
> > > > Hi all,
> > > >
> > > > Having some troubles getting a GPO to take effect (Windows 2000
> > > > sp4).
> > > > Have a GPO at the domain level that is working fine. I have created
> > > > a new OU under that for our users with laptops. After moving the
> > > > appropriate
> > > > computers into that group, the new policy seettings are not being
> > > > applied.
> > > > The domain level GPO does not have the no override setting enabled.
> > > > Other
> > > > OU's (citrix ou, etc) have their own GPO's that are working, just the
> > > > new
> > > > one i created is not working. Permissions look fine. Any ideas on what
> > > > I'm
> > > > doing wrong? Caffeine hasn't helped today.
> > > >
> > > > Thanks,
> > > >
> > > > -Shawn
> > > >
> > > > --
> > > > Shawn Beairsto
> > > > Network Administrator
> > > > Data Kinetics Ltd. / Smart Telecom
> > > > http://www.dkl.com
> > > > http://www.smarttelecom.ca
> > > > *****************************
> > > > New Site from The Kenzig Group!
> > > > Windows Vista Links, list options
> > > > and info are available at:
> > > > http://www.VistaPop.com <http://www.vistapop.com/>
> > > > *****************************
> > > > To Unsubscribe, set digest or vacation
> > > > mode or view archives use the below link.
> > > >
> > > > http://thethin.net/win2000list.cfm
> > > >
> > >
> > >
> > >
> > > --
> > >
> > > --------------------------------------------------------------------------
> > > George Yobst, Library Technology Analyst phone: 503.723.4890
> > > Library Information Network of Clackamas County fax: 503.794.8238
> > > 16239 SE McLoughlin Blvd, Suite 208 web:
> > > http://www.lincc.lib.or.us
> > > Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
> > >
> > > "...it is impossible for anyone to begin to learn
> > > what he thinks he already knows." - Epictetus
> > >
> > >
> >
> >
> > --
> >
> > --------------------------------------------------------------------------
> > George Yobst, Library Technology Analyst phone: 503.723.4890
> > Library Information Network of Clackamas County fax: 503.794.8238
> > 16239 SE McLoughlin Blvd, Suite 208 web:
> > http://www.lincc.lib.or.us
> > Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
> > "...it is impossible for anyone to begin to learn
> > what he thinks he already knows." - Epictetus
> >
> >
>
>
> --
> --------------------------------------------------------------------------
>
> George Yobst, Library Technology Analyst phone: 503.723.4890
> Library Information Network of Clackamas County fax: 503.794.8238
> 16239 SE McLoughlin Blvd, Suite 208 web:
> http://www.lincc.lib.or.us
> Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
> "...it is impossible for anyone to begin to learn
> what he thinks he already knows." - Epictetus
>
>
--
--------------------------------------------------------------------------
George Yobst, Library Technology Analyst phone: 503.723.4890
Library Information Network of Clackamas County fax: 503.794.8238
16239 SE McLoughlin Blvd, Suite 208 web: http://www.lincc.lib.or.us
Oak Grove, OR 97267-4654 email: george.yobst@xxxxxxxxx
"...it is impossible for anyone to begin to learn
what he thinks he already knows." - Epictetus
Other related posts:
