Windows Server 2003 Domain Group Policy: "Computer Configuration/Windows Settings/Local Policies/Security Options" not applying to domain users??!

Thanks for your quick response, mkline71.

No, I did not have the computers placed in the specific OU.  Theoretically, this seems as though it would fix the problem.  Well, it didn't.  I have run "gpupdate /target:computer /force /boot" many times on two test client computers, but still no luck with the logon message.  I did try, however, to edit the local group policy on a specific machine, and it worked.  This method is very tedious for use on multiple computers, and I would prefer being able to specify this in my OU's group policy from the domain controller.

Thank you,
BoxRipper

So you moved the computer to the OU then linked the logon banner GPO to that OU and still a no go.

That should have worked, try to run an RSoP report from GPMC more on the RSoP report here

http://technet.microsoft.com/en-us/library/cc737701(WS.10).aspx

That should tell you what policies and settings should be applying to the machine.

Thanks

Mike

Yes I did everything stated above but no success.

I did run an RSoP and it showed the computer settings not being applied. Ran gpresult and it said N/A under the computer config section. Any insight?

Thanks,
BoxRipper

Ok, I just attempted to run RSoP again...
In the computer Selection area part of the "Resultant Set of Policy Wizard" I clicked the "Another computer:" radio button and browsed for the corresponding computer.  I got a "Group Policy Error": "Failed to connect to DIGITALSYSTEMSI\DIGSYS-MIKE due to the error listed below.  Ensure that the Windows Management Instrumentation (WMI) service is enabled on the target computer, and consult the event log of the target computer for further details.  Details: The requested name is valid, but no data of the requested type was found."

I checked the target computer and WMI service is enabled running automatically.  What's wrong here, guys?

Ok, I have updated information for you guys...

Logged in as administrator on the client domain computer, I ran RSoP... I see the computer configuration area has a red "X".  I right clicked the computer configuration part and click properties then go to error information.  I see: Group Policy Infrastructure failed due to the error listed below.  Access is denied.  Note:  Due to the GP Core failure, none of the other Group Policy components processed their policy.  Consequently, status information for the other components is not available.

I then opened event viewer on the client computer under "application" and see many "userenv" errors.  In detail, the error says: Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

Obviously I see the problem here.. But how do I fix it?

I figured it out.  Turns out the share permissions on \\server\SYSVOL were skrewed up.  Changed it to Administrators with full control and Authenticated Users with read access.

Thanks for the help, mkline71.

Good work!!

Thanks, Mike. Took me days...