Problems with group policy

Hi there

I have been having problems with my win 2000 server, i have tryed to create group policies for users.they are all running 2000 machines.

I created an OU with 2 sub OU's, one for the users and one for the computers.the group policy was set in the parent OU and the 2 sub OU's to take the parent group policy
I then added the users and the respectable computers and refreshed the system with secedit /refreshpolicy USER_POLICY and secedit /refreshpolicy MACHINE_POLICY.

now the thing is that i tested this setup on a test domain that i created in our workshop and it worked 100%, but when i tryed to implement it on the proper domain the users do not take on the group policies unless you make the user a roaming profile and log on as the user on the server.

Is there a setting on the server stopping the server from refreshing the policies?
Another thing is that when I log on to a users machine and check to event viewer it gives the error " windows can not determine the user or computer name, return value (1722)".
this is obviously not correct.

could some one please help as i have been battleing with this problem for over 2 weeks now.

Thanks so much

Ricky Hollis
RickyhollisAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

izwizCommented:
Do you have more than one DC?

Check that the NTFRs event log has no errors. The Group Policy editor always connects to the PDC emulator to make changes, however -these changes are not always replicated across DCs for some reason. This may cause symptoms that policies seem to be intermittently applied (depending on which DC you log into).

Check out the logs in \WINNT\DEBUG

also look at the file version on the ini file in the policies folder of SYSVOL on the different DCs.

As for the client machine error -take the machine out of the domain (join it to workgroup) and re-add it , which will recreate it's computer account. -just a thought.
0
wtrmk74Commented:
Read this article --- but you have to read the entire thing to fully understand all the possibilities.

http://www.microsoft.com/WINDOWS2000/techinfo/reskit/deploymentscenarios/scenarios/ou_design_implement_ou_structure.asp 

let us know if this helps.
wtrmk74

0
mikeleebrlaCommented:
in the OU you are working on, rightclick on the OU and then select the Group Policy Tab, click on your GPO, and select properties, then go to the security tab.  Make sure your computer/user group that you want the GPO to be applied to has at least the read and apply group policy options checked.  Without these permissions they will NOT be applied to the computer/group regardless of where they are placed in your OU tree.  Hope this helps as it is the most common GPO mistake.
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

RickyhollisAuthor Commented:
That option has been selected but it still doesn't work.
I think there must be a problem with the AD.
0
RickyhollisAuthor Commented:
we have one DC, i have tryed to revove the computers from the domain and add them again but that doesn't work.
0
wtrmk74Commented:
Did you get a chance to read the article ... there is a lot of useful information in there on layout step by step!
I am pretty sure it can help you.

:)
wtrmk74
0
wtrmk74Commented:
Is the primary DNS pointing to DNS Server where you have the Group Policy on.
and
Are the computers added to the OU which has the Group Policy in it
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
RickyhollisAuthor Commented:
Thanks alot for your help guys.
It seems that one of the guys had gone around and made changes to the DNS.
so that was the problem.

Thanks alot for all your help but it was wtrmk74 that reminded me to go and recheck the DNS.

Regards
Ricky

P.S. Happy Holidays!!!
0
wtrmk74Commented:
Glad it all worked out

have a great holiday season
wtrmk74
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.