Zourous
asked on
Applying a group policy in a Windows 2000 Domain
All I want to do is to be able to apply a Group policy (that includes folder redirection) from my W2K Server to W2K pro client PC, but despite playing around for hours I'm missing something or getting something badly wrong.
My set-up
Server W2K Advanced server networked with Client W2K Professional
What I have done
I have modified the 'Default domain policy' on the server to enable folder redirection on 'My documents', with the folders redirecting to the server hard drive to a shared folder called 'Users' including the %Username% variable, with full control permissions on the share and NTFS. I have run the refresh policy command for User and machine policies. The 'Default domain policy' is linked to the domain and the security includes 'read' & 'apply group policy' for Administrators. I log into the W2K pro PC as an administrator into the domain but the folder does not redirect because the same files do not appear on the server share as the one's on the W2K's 'My documents' folder.
My set-up
Server W2K Advanced server networked with Client W2K Professional
What I have done
I have modified the 'Default domain policy' on the server to enable folder redirection on 'My documents', with the folders redirecting to the server hard drive to a shared folder called 'Users' including the %Username% variable, with full control permissions on the share and NTFS. I have run the refresh policy command for User and machine policies. The 'Default domain policy' is linked to the domain and the security includes 'read' & 'apply group policy' for Administrators. I log into the W2K pro PC as an administrator into the domain but the folder does not redirect because the same files do not appear on the server share as the one's on the W2K's 'My documents' folder.
If AD is running:
open AD users and computers
rt click on ou
click on group policy
click new
enter a name, example - Policy - Folder Redirect
click edit
under user config > windows settings > folder redirection > my docs
rt click and click properties.
set your settings
reboot both machines
FYI: The folder must be shared first. Also the path to the redirect must be \\server\share
open AD users and computers
rt click on ou
click on group policy
click new
enter a name, example - Policy - Folder Redirect
click edit
under user config > windows settings > folder redirection > my docs
rt click and click properties.
set your settings
reboot both machines
FYI: The folder must be shared first. Also the path to the redirect must be \\server\share
ASKER
Yes the server is running as a DC.
When right clicking my computer you can select to map a network drive. From here I can select Active directory and then my domain name. I guess this proves that I am connected.
I have tried setting up a new policy as you've explained under a ou but the results are the same.
When I set-up the original default domain policy, it worked on the server PC but not on the client PC.
When right clicking my computer you can select to map a network drive. From here I can select Active directory and then my domain name. I guess this proves that I am connected.
I have tried setting up a new policy as you've explained under a ou but the results are the same.
When I set-up the original default domain policy, it worked on the server PC but not on the client PC.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Are you sure the user account you use inherit from your policy? isn't there any blocked inheritance in his OU?
Are you sure the user account you use inherit from your policy? isn't there any blocked inheritance in his OU?
verify that the client is joined to the domain (rt click my computer > properties > net id > network button)
is the client on same subnet and authenticates with that DC.
is the client on same subnet and authenticates with that DC.
ASKER
It turned out to be the absence of DNS settings. I thought I had set it in the DHCP settings, but obviously not. It certainly speeded up the login process as well.
also if the client is joined to the domain (rt click my computer > network...)