Group Policy problems

Running Windows 2000 Advanced Server (with 2 additional DCs running 2000 Server), Active Directory, and XP clients.

I'm having an issue with my group policies.  I have 2 computer labs with about 20 computers each.  In AD, I have an OU set up for the lab computers.  The OU has a group policy that has several different options defined.  My problem is that some of these settings are implemented to the clients and some aren't.  For example, the login banner is displayed on the client computers, but the defined wallpaper is not.  I can modify the login banner text and that change will make it to the clients, so I know the policy itself is being implemented, just not all of the settings of that policy.  I've printed and compared the settings of the policy to the default domain policy and can see no conflicts.  

Also, I've tried installing software packages (such as Office XP) using Group Policy, but it never works.  I've read the Microsoft Knowledge Base articles on the topic and followed the directions to the letter, tried a couple different methods, but it will not deploy the software.  That Group Policy seems to be ignored much like the other.

Does anyone have any suggestions?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

i guess this is what is happening.

you have a GPO defined for your labs with some settings and these OUs belong to a domain. the domain itself has a GPO i would assume. so if the domain does have one, it is overriding it, because the domain policy has precedence over particular OU policy. What you need to ensure is that the domain policy is not inherited to the OUs. You should see a check box, saying not to inherit GPO from domain. Check that and things should work for you.
by the way r u from nebraska?
Make sure that you're applying User policys to OU's that contain users and Computer policys to OU's containing PC's. I had to learn this the hard way. Ex: in a GPO you've got Computer and User configuration. Computer settings will apply to PC's in the OU and User settings to Users. I usually make seperate GPO's and label them accordingly to apply just to users and computers. This makes it easier to figure out what you've configured later, and reuse GPO's in multiple places since they only appy what you've labeled them to do.

I believe the setting that Adonis is looking for is 'Block Policy Inheritance' to be policktickalee correct :), it should appear at the bottom of the OU props window.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
HeathicusAuthor Commented:
Thanks PaulHieb.  That was my problem.  I thought that User Configuration would apply to users who logged on to the computers that were affected by the OU's group policy.  I moved the user account that is used to log onto these computers into the OU as well and everything works now.  It's not the ideal situation because I want certain user settings to be in effect on the lab computers only, but not on other computers.  And I guess I was just doing something wrong in my attempt to install office from Group Policy.  I'll keep working on it.
I know exactly what you're talking about, there are certain things in the user configuration that I also would like to assign to any User logging on to a computer affected by a GPO, this functionality seems logical, but doesn't happen in the Microsoft world I guess.

One note about assigning Office to install via group policy, Microsoft recommends that you assign it via the computer configuration, so that any user logging on has access to the software, but I prefer to assign it via user, cause then when the user clicks on any office app for the first time, the installation appears and you have the chance to do a complete installation as opposed to the minimal, automated installation and not recieve 'outlook is reconfiguring itself' boxes all the time.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.