Group Policy problems

Posted on 2003-11-12
Last Modified: 2010-04-14

Running Windows 2000 Advanced Server (with 2 additional DCs running 2000 Server), Active Directory, and XP clients.

I'm having an issue with my group policies.  I have 2 computer labs with about 20 computers each.  In AD, I have an OU set up for the lab computers.  The OU has a group policy that has several different options defined.  My problem is that some of these settings are implemented to the clients and some aren't.  For example, the login banner is displayed on the client computers, but the defined wallpaper is not.  I can modify the login banner text and that change will make it to the clients, so I know the policy itself is being implemented, just not all of the settings of that policy.  I've printed and compared the settings of the policy to the default domain policy and can see no conflicts.  

Also, I've tried installing software packages (such as Office XP) using Group Policy, but it never works.  I've read the Microsoft Knowledge Base articles on the topic and followed the directions to the letter, tried a couple different methods, but it will not deploy the software.  That Group Policy seems to be ignored much like the other.

Does anyone have any suggestions?
Question by:Heathicus
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 11

Expert Comment

ID: 9734256
i guess this is what is happening.

you have a GPO defined for your labs with some settings and these OUs belong to a domain. the domain itself has a GPO i would assume. so if the domain does have one, it is overriding it, because the domain policy has precedence over particular OU policy. What you need to ensure is that the domain policy is not inherited to the OUs. You should see a check box, saying not to inherit GPO from domain. Check that and things should work for you.
LVL 11

Expert Comment

ID: 9734260
by the way r u from nebraska?

Accepted Solution

PaulHieb earned 125 total points
ID: 9735426
Make sure that you're applying User policys to OU's that contain users and Computer policys to OU's containing PC's. I had to learn this the hard way. Ex: in a GPO you've got Computer and User configuration. Computer settings will apply to PC's in the OU and User settings to Users. I usually make seperate GPO's and label them accordingly to apply just to users and computers. This makes it easier to figure out what you've configured later, and reuse GPO's in multiple places since they only appy what you've labeled them to do.

I believe the setting that Adonis is looking for is 'Block Policy Inheritance' to be policktickalee correct :), it should appear at the bottom of the OU props window.

Author Comment

ID: 9750778
Thanks PaulHieb.  That was my problem.  I thought that User Configuration would apply to users who logged on to the computers that were affected by the OU's group policy.  I moved the user account that is used to log onto these computers into the OU as well and everything works now.  It's not the ideal situation because I want certain user settings to be in effect on the lab computers only, but not on other computers.  And I guess I was just doing something wrong in my attempt to install office from Group Policy.  I'll keep working on it.

Expert Comment

ID: 9750945
I know exactly what you're talking about, there are certain things in the user configuration that I also would like to assign to any User logging on to a computer affected by a GPO, this functionality seems logical, but doesn't happen in the Microsoft world I guess.

One note about assigning Office to install via group policy, Microsoft recommends that you assign it via the computer configuration, so that any user logging on has access to the software, but I prefer to assign it via user, cause then when the user clicks on any office app for the first time, the installation appears and you have the chance to do a complete installation as opposed to the minimal, automated installation and not recieve 'outlook is reconfiguring itself' boxes all the time.

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cursed with a Windows 2000 Server that needs to copy files 3 739
VSS on host & VM 10 424
IP Addresses List On Network 8 291
Windows Server 2012 & 2000 Network HELP 55 117
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Recently I was talking with Tim Sharp, one of my colleagues from our Technical Account Manager team about MongoDB’s scalability. While doing some quick training with some of the Percona team, Tim brought something to my attention...
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
In an interesting question ( here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question