Group Policy On Win2k

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

i have set a group policy on my win2k server but it does not apply to all clients. I think it may have something to do with DNS. All clients are win2k prof and there is a network router?

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

open a command prompt on a client that you suspect does not get the policy, and type gpresult. then analyze the ... uhm ... result.
why do you think it is dns related?

 

Are you positive you applied the correct group to the policy?
Just asking as I've seen this more then once. ;)

 

It's a domain environment as far as I'm aware, Jack asked me about this a while back, and whilst I can't remember what his actual problem was/is I seem to remember asking him to change something in DNS and as far as I know it resolved the problem.

I could be thinking about something completely different though.

 

Okay so we need more information [see earlier posts by others] - but some things to consider...

1. Does the clients time sync correctly?

2. Are there local policies on the clients taking precedence? - remember that the precedence is Local Site, Domain and then OU [organisational unit]

3. Could be like the problem with XP clients accessing a Windows 2000 domain and the domain policies not applying correctly....

http://support.microsoft.com/default.aspx?scid=kb;en-us;307900&Product=winxp

A downlevel variation for NT and 2000 clients:
http://support.microsoft.com/default.aspx?scid=kb;en-us;274478

4. Is the lack on policy affecting security settings or the running of a particular application across the domain??

- btw a level 300 resource here...
http://www.sysinternals.com/blog/2005/12/circumventing-group-policy-as-limited.html

HTH

supag33k

 

As simon said he told me to do something with DNS on the server. I think he told me to add something so when clients sent for something on DNS it would forward DNS to the router.

I dont know but i think thats what was said

 

Jack can you explain in simple terms what the problem is, and what you have tried doing to resolve it?

If what I told you to do before fixed the problem, as I seem to remember you saying it did, what have you changed since?



EDIT: has this got something to do with clients not being able to access the Internet when the GPO is applied?

 

are all the pc's on the same subnet?

 

Group Policy can be manually updated on the client to force any changes, this is particularly helpful for testing Group Policy changes. There are different tools depending on your operating system.

Windows 2000: To update Group Policy, run the following command:

To update machine policy:

Secedit /refreshpolicy machine_policy

To update user policy:

Secedit /refreshpolicy user_policy

You can enforce an update by adding an /enforce switch at the end of the command. The enforce switch will ignore the client extension setting ‘Process even if the Group Policy Object has not changed’ and set all settings regardless of whether the GPO(s) have changed.

Windows XP: To update Group Policy, run the following command:

To update machine and user policies:

Gpupdate

To update only machine policies:

Gpupdate /target:Computer

To update only user policies:

Gpupdate /target:User

Similar to Windows 2000, you can specify /force to apply all settings, changed or not.

 

its the group policy does not get applied to the client

 

you already said that. can't you be a little more vague?

 

client machines in correct ou?

user accounts in correct ou?

machine policy or user policy?

what happens when you do gpupdate /force?