1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Group Policy On Win2k

Discussion in 'Networks' started by jackd, Mar 23, 2006.

  1. jackd

    jackd Megabyte Poster

    555
    7
    64
    i have set a group policy on my win2k server but it does not apply to all clients. I think it may have something to do with DNS. All clients are win2k prof and there is a network router?
     
  2. d-Faktor
    Honorary Member

    d-Faktor R.I.P - gone but never forgotten.

    810
    0
    39
    open a command prompt on a client that you suspect does not get the policy, and type gpresult. then analyze the ... uhm ... result.
    why do you think it is dns related?
     
  3. tomshawk

    tomshawk Byte Poster

    142
    1
    24
    Are you positive you applied the correct group to the policy?
    Just asking as I've seen this more then once. ;)
     
    Certifications: MCSE/NT4, MCP/2K3, MCP+I, CCNA, Net+, A+
  4. AJ

    AJ Administrator Administrator

    6,773
    102
    221
    Is this in a domain or just a workgroup. As usual my friend a bit more info required :D
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Looking at doing ..................
  5. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    It's a domain environment as far as I'm aware, Jack asked me about this a while back, and whilst I can't remember what his actual problem was/is I seem to remember asking him to change something in DNS and as far as I know it resolved the problem.

    I could be thinking about something completely different though. :rolleyes:
     
  6. supag33k

    supag33k Kilobyte Poster

    461
    19
    49
    Okay so we need more information [see earlier posts by others] - but some things to consider...

    1. Does the clients time sync correctly?

    2. Are there local policies on the clients taking precedence? - remember that the precedence is Local Site, Domain and then OU [organisational unit]

    3. Could be like the problem with XP clients accessing a Windows 2000 domain and the domain policies not applying correctly....

    http://support.microsoft.com/default.aspx?scid=kb;en-us;307900&Product=winxp

    A downlevel variation for NT and 2000 clients:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;274478

    4. Is the lack on policy affecting security settings or the running of a particular application across the domain??

    - btw a level 300 resource here...
    http://www.sysinternals.com/blog/2005/12/circumventing-group-policy-as-limited.html

    HTH

    supag33k
     
    Certifications: MCSE (NT4/2000/2003/Messaging), MCDBA
    WIP: CCNA, MCTS SQL, Exchange & Security stuff
  7. jackd

    jackd Megabyte Poster

    555
    7
    64
    As simon said he told me to do something with DNS on the server. I think he told me to add something so when clients sent for something on DNS it would forward DNS to the router.

    I dont know but i think thats what was said
     
  8. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    Jack can you explain in simple terms what the problem is, and what you have tried doing to resolve it?

    If what I told you to do before fixed the problem, as I seem to remember you saying it did, what have you changed since?

    :blink

    EDIT: has this got something to do with clients not being able to access the Internet when the GPO is applied? :confused2
     
  9. _omni_

    _omni_ Megabyte Poster

    647
    10
    62
    are all the pc's on the same subnet?
     
    Certifications: MCSE 2003, MCSA:M
  10. mojorisin

    mojorisin Kilobyte Poster

    395
    14
    41
    Group Policy can be manually updated on the client to force any changes, this is particularly helpful for testing Group Policy changes. There are different tools depending on your operating system.

    Windows 2000: To update Group Policy, run the following command:

    To update machine policy:

    Secedit /refreshpolicy machine_policy

    To update user policy:

    Secedit /refreshpolicy user_policy

    You can enforce an update by adding an /enforce switch at the end of the command. The enforce switch will ignore the client extension setting ‘Process even if the Group Policy Object has not changed’ and set all settings regardless of whether the GPO(s) have changed.

    Windows XP: To update Group Policy, run the following command:

    To update machine and user policies:

    Gpupdate

    To update only machine policies:

    Gpupdate /target:Computer

    To update only user policies:

    Gpupdate /target:User

    Similar to Windows 2000, you can specify /force to apply all settings, changed or not.
     
    WIP: 70-685 http://www.speedtest.net/result/3377759783.png
  11. jackd

    jackd Megabyte Poster

    555
    7
    64
    its the group policy does not get applied to the client
     
  12. _omni_

    _omni_ Megabyte Poster

    647
    10
    62
    you already said that. can't you be a little more vague?
     
    Certifications: MCSE 2003, MCSA:M
  13. MarkN

    MarkN Nibble Poster

    79
    3
    15
    client machines in correct ou?

    user accounts in correct ou?

    machine policy or user policy?

    what happens when you do gpupdate /force?
     
    Certifications: MCSE NT4\W2K,CNE,CCEA,ASE
    WIP: CCNA

Share This Page

Loading...